• HIPAA: Patient is entitled to "designated record set" -Medical record -Billing record -Other records used to make decisions about patient • EHR Portal is limited portion of medical record -Patient is entitled to more information than is available through EHR portal HIPAA's Right of Access to PHI.