Partial access to PHI

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Segmentation follows the denial ground

45 CFR 164.524 requires the entity, to the extent possible, to give access to other requested PHI after excluding material it may deny. Map the exact record and ground. Avoid broad flags that hide an entire chart because one document needs review.

Start with the complete designated-record-set search rather than with the potentially restricted item. Reconcile the request against the clinical record, billing record, attachments, communications used to make decisions, archived systems, and responsive information held by business associates. Assign every located item one of three outcomes: provide, withhold on a documented ground, or investigate before the deadline. This inventory prevents a narrow denial question from obscuring records that are readily available.

Apply the ground at the smallest workable level. A restriction tied to one passage may permit release of the remaining pages. A restriction tied to one document may leave the rest of the category releasable. Redaction should preserve enough surrounding context for the released material to remain usable. Record systems that can export only a whole encounter may require a controlled copy-and-redact workflow with a second-person quality check.

Keep the access and denial tracks synchronized

Partial access creates two related deliverables. The access track prepares the releasable copy in the requested form and format when readily producible. The denial track prepares the written notice required by the applicable denial provision. Route reviewable denials to the review process and keep any accessible remainder moving. The request owner should see one case with linked tasks, rather than two disconnected tickets that can close independently.

The response clock still applies to the request as a whole. When an entity uses the one permitted extension, its written notice should give the reason and completion date. The production manifest should identify the delivered categories without revealing the sensitive content behind a valid denial. Preserve a copy or reproducible hash of the exact production so later questions can be answered from evidence.

The response needs two outcomes

Record what was produced and what was denied. HHS access guidance explains access scope, denials, and review. Give the individual a readable production list plus the plain-language denial notice, complaint route, and review route when the denial is reviewable.

A quality response answers practical questions: which date range was searched, which categories are included, what format was used, how the files can be opened, and whom to contact about a missing item. The denial component identifies the basis, explains whether review is available, describes how to request it when applicable, and provides the complaint information required by the rule. Legal or privacy review should focus on the withheld scope and ground, while fulfillment staff confirm delivery and readability.

Example by record category

A request covers seven categories. Five are released, one is partially released after a valid exclusion, and one is fully denied. Category-level delivery is 6 of 7 categories with some access. Record-level counts should show the actual produced and withheld items.

Suppose the seven categories contain 126 responsive files. The practice produces 118, redacts one page from three files, and withholds five files on documented grounds. Reporting only “6 of 7 categories” would conceal most of the operational detail. A defensible case record shows 121 files with at least some access, five fully withheld files, three redacted files within the produced set, the decision basis for each exception, and proof that the 118 unredacted files plus three redacted copies were delivered.

Partial-access checklist

• Confirm the requester's identity, authority, scope, date range, form, and delivery choice.
• Search every responsive designated record set and relevant business associate source.
• Classify each item and cite the precise denial ground for withheld material.
• Segregate releasable content at the smallest workable level and test redactions.
• Prepare the access production and denial notice under one case owner and deadline.
• Include review and complaint information when the governing provision requires it.
• Test file count, page count, readability, destination, and secure delivery.
• Retain the inventory, decision record, production manifest, notice, and delivery proof.

Owner controls

Test whether the record system can segment documents, pages, fields, and attachments while preserving context. Require privacy or legal review of broad exclusions, retain the production manifest, and verify that later portal exports respect the same decision.

Useful measures separate completeness from timeliness: responsive items found, items delivered, items partially released, items fully withheld, notices issued, review requests received, and cases delivered on time. Sample cases in which an entire category was denied, because category-wide decisions create the greatest risk of overbreadth. Reopen a case when delivery evidence shows a corrupt archive, missing attachment, or redaction that removed surrounding information needed to understand the released record.