An ABA health record access delay tracker for families keeps one pending request, every dated response and any extension notice in one place. It records what the provider or health plan actually said without calculating a legal deadline, declaring a violation or turning a delay into a denial.
Families and Caregivers / Progress, Quality, Rights and Ethical Care.
Use this only for a pending access request
Start this tracker only after a family has submitted a request to inspect or receive health records and access has not yet been completed. The organization may have acknowledged the request, reported a delay, sent a written extension notice or said that work remains in progress.
The ABA health record access delay tracker for families is a chronology and handoff aid, not a deadline calculator.
Do not use the worksheet to decide whether the request is governed by HIPAA, state law, a payer process or an ordinary records policy. Record the process named by the organization, then route applicability questions to its responsible privacy, records or payer office and any qualified regulator, state-law or legal source.
Keep these events separate:
- A pending request stays in the dated follow-up log until an observed endpoint.
- An extension notice belongs here with its exact language and dates.
- A written denial moves to the access denial and review tracker.
- Delivered records move to the records request and delivery tracker for reconciliation.
- A possible record error moves to the record correction and amendment tracker.
- A payer service or claim denial follows the payer's stated appeal or grievance process.
Preserve the original request before following up
Record facts from the submitted request and its receipt evidence. Do not reconstruct them from memory if the original is available.
- [ ] Organization and office contacted: ______.
- [ ] Process named by the organization: ______.
- [ ] Person whose records are involved: ______.
- [ ] Requester name and stated role: ______.
- [ ] Request date, time and route: ______.
- [ ] Receipt or confirmation evidence: ______.
- [ ] Records and date range requested: ______.
- [ ] Inspection, copy or both requested: ______.
- [ ] Requested form, format and delivery route: ______.
- [ ] Accessibility or communication need stated: ______.
- [ ] Family's own request reference: ______.
Attach a copy of the original request or upload receipt and sent-message evidence to the family's chosen storage location. This worksheet is an index, not a place to paste sensitive clinical content unnecessarily.
Write the current status as an attributed statement
Choose the description that matches the most recent dated communication. Add the source instead of converting uncertainty into a conclusion.
- [ ] Access completed: yes, no or unclear.
- [ ] Part of the requested material provided: ______.
- [ ] Organization says the request is pending: ______.
- [ ] Written extension notice received: ______.
- [ ] Written denial received: ______.
- [ ] Another office identified as record holder: ______.
- [ ] Most recent source, date and exact wording: ______.
- [ ] Next date or action stated by that source: ______.
Use phrases such as “records office email dated states .” Avoid labels such as “late,” “noncompliant” or “approved.” If a responsible source uses one of those terms, quote and attribute it rather than adopting it as the family's conclusion.
Maintain one dated contact log
Record each contact once. Save the underlying message separately when possible.
Date and timeDirectionPerson or officeChannelWhat the family askedWhat the source statedDocument savedNext step and ownerIncoming / outgoingIncoming / outgoingIncoming / outgoingIncoming / outgoing
If a phone call produces a date, reason or instruction, ask whether the organization can confirm it through its normal written route. Record the statement as verbal unless a written response arrives; do not convert a call note into an organization-issued notice.
Capture an extension notice without interpreting it
For a covered entity acting under the HIPAA access process, the current regulation describes a written statement within the initial period that gives the reason for delay and a date by which action will be completed. It also describes only one extension for an access request. Those rules are in 45 CFR 164.524(b)(2). This worksheet does not determine whether those provisions apply to a particular organization or request.
Notice fieldCopy from the noticeNotice dateDelivery method and received dateRequest identified by the noticeOrganization's stated reason for delayOrganization's stated completion dateContact person or officeRecord categories or dates referencedPartial access or alternative offeredAttachments, portal messages or reference numbersFamily question about ambiguous wording
Do not replace the stated completion date with a date produced by a calculator. Receipt facts, applicable law, weekends, holidays, state rules and organization-specific circumstances may require qualified review.
Record partial or alternative access separately
A pending request can have more than one outcome. The organization may provide some material, arrange inspection, offer another format or direct the family to another holder. Give each event its own row, and do not treat one event as complete satisfaction of the original request.
Item or categoryOriginal requestWhat was offered or deliveredDateFormat or locationFamily observationStill open?Yes / no / unclearYes / no / unclearYes / no / unclear
The current regulation says that when an organization does not maintain requested information and knows where it is maintained, the organization must inform the individual where to direct the request, if the HIPAA provision applies. Record the actual referral. Do not infer that a different organization has accepted a request.
Prepare a concise follow-up
A follow-up can identify the request without exposing more health information than needed in an ordinary message. Use the organization's confirmed contact route when one is available.
HHS professional access guidance provides operational background for covered entities handling access requests. Use it as federal background, while keeping the family's message focused on the observed request and the organization's own status.
Copyable prompt:
I am following up on the records access request submitted on [date] through [route], reference [number if any]. The request covered [brief record categories and date range]. Your [email, portal message or letter] dated [date] stated [exact status or completion date]. Please confirm the current status, the responsible office, any action needed from me and the route for written updates. My communication or accessibility need is [need, if relevant].
Keep a sent copy and receipt evidence. Do not include a diagnosis, treatment detail or full record excerpt unless the organization says it is necessary and the family is comfortable using that route.
Keep accessibility and communication needs visible
The Department of Justice effective-communication guidance explains that covered organizations may need suitable auxiliary aids or services depending on the communication and context. Applicability and the appropriate aid are fact-specific. Record the family's stated need and the organization's response without declaring compliance.
- [ ] Preferred language: ______.
- [ ] Interpreter or relay need: ______.
- [ ] Accessible notice or document format: ______.
- [ ] Best contact method: ______.
- [ ] Verified communication recipient, if any: ______.
- [ ] Organization response and date: ______.
- [ ] Unresolved access question: ______.
Document the endpoint
Keep the tracker open unless there is an observed endpoint. Silence is a status to follow up on, not closure.
- [ ] Requested access completed: evidence and date ______.
- [ ] Partial access completed: open items and date ______.
- [ ] Written denial received: denial-tracker reference ______.
- [ ] Different record holder identified: source and date ______.
- [ ] Family expressly revised or withdrew the request: evidence ______.
- [ ] Another written outcome received: document and date ______.
- [ ] No endpoint yet: next follow-up owner and date ______.
Record where the family stored the delivered material and follow-up evidence. Use access controls appropriate to the family's device and circumstances; this page cannot certify a storage method as secure.
Fictional filled example
The example below is invented and is not a deadline calculation or legal conclusion.
FieldFictional entryOrganizationHarbor Path Behavior Center, records officeOriginal requestMarch 3 portal request for session notes and billing records from January 1 through February 28, electronic copy requestedReceipt evidencePortal confirmation HP-2041 dated March 3Current statusMarch 25 records-office message says request remains in processExtension noticeLetter received March 27 states archived billing files caused a delay and names April 18 as the completion dateFamily follow-upMarch 28 portal message asks whether session notes can be supplied while billing files are retrievedPartial accessSession notes delivered April 2; billing records not yet deliveredAccessibility needTagged PDF requested for screen-reader use; office says it forwarded the request to document servicesEndpointStill open; family plans to check the named portal thread after April 18 if no written outcome arrives
The family records the letter's date rather than labeling it timely or untimely. It does not treat delivery of one category as proof that the original request is complete.
Sources
The current text of 45 CFR 164.524 supplies the federal access, timing, extension, provision and denial framework. HHS professional right-of-access guidance explains the federal timing framework and encourages prompt access. HHS medical-record information for individuals and the consumer Get It, Check It, Use It resource provide plain-language background.
For ABA services, the BACB Ethics Code for Behavior Analysts is a professional ethics source, not a ruling on a family's legal access request. It supports careful documentation, confidentiality and accurate communication within a behavior analyst's role. The DOJ effective-communication guidance is included so communication access is not lost during follow-up; it does not decide which law or aid applies.
This tool cannot determine whether HIPAA, a state law, payer rule or another policy controls; who may act for the individual; which records are included; whether an extension is valid; when a clock began; whether a response is late; or whether a complaint, violation or remedy exists. Current sources and qualified review are required for those questions.
Finni resources
