•Portal Access < Patient's Right of Access •Under HIPAA, may limit access to PHI if: -Not part of designated record set -Psychotherapy notes -Obtained under a promise of confidentiality -Access may cause substantial harm to patient or other person. (45 CFR 164.524(a)) •May limit access to additional records in portal..