HIPAA requires that practices verify the identity and authority of a requestor before giving access to protected health information.2 When a person seeks access to his or her own record, this ....