<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Triangle Health</title>
    <description>The latest articles on DEV Community by Triangle Health (@trianglehealth).</description>
    <link>https://dev.to/trianglehealth</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4180051%2F2bdf409a-d082-4cdc-b644-f156474e3b81.png</url>
      <title>DEV Community: Triangle Health</title>
      <link>https://dev.to/trianglehealth</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/trianglehealth"/>
    <language>en</language>
    <item>
      <title>Your patient portal isn't your medical record: what HIPAA access actually covers</title>
      <dc:creator>Triangle Health</dc:creator>
      <pubDate>Mon, 12 Oct 2026 19:19:43 +0000</pubDate>
      <link>https://dev.to/trianglehealth/your-patient-portal-isnt-your-medical-record-what-hipaa-access-actually-covers-4aia</link>
      <guid>https://dev.to/trianglehealth/your-patient-portal-isnt-your-medical-record-what-hipaa-access-actually-covers-4aia</guid>
      <description>&lt;p&gt;If you build or use health software, a common misunderstanding is that the patient portal is the record. It's a view. Under HIPAA, patients generally have a right to access protected health information in a provider's or plan's &lt;em&gt;designated record set&lt;/em&gt;, which can include much more than the portal screen shows.&lt;br&gt;
Key takeaways:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Portals (MedlinePlus: visits, results, billing, prescriptions, messaging) show what that system chooses to post.&lt;/li&gt;
&lt;li&gt;Outside consult notes, scanned documents and imaging often don't appear.&lt;/li&gt;
&lt;li&gt;If the information is kept electronically, patients can generally get an electronic copy in the form they request when it's readily producible.&lt;/li&gt;
&lt;li&gt;Covered entities must act within 30 calendar days. One 30-day extension is allowed with a written reason.&lt;/li&gt;
&lt;li&gt;Different portals at different doctors are why records end up scattered.
Full explainer with HHS/OCR/ONC sources: &lt;a href="https://www.trianglehealth.com/answers/patient-portal-vs-full-medical-record" rel="noopener noreferrer"&gt;https://www.trianglehealth.com/answers/patient-portal-vs-full-medical-record&lt;/a&gt;
&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>healthtech</category>
      <category>hipaa</category>
      <category>interoperability</category>
    </item>
  </channel>
</rss>
