Marisol, a 58-year-old client, is admitted to the medical unit with community-acquired pneumonia. She tells the nurse that she wants to see her complete hospital chart, including the physician progress notes and nursing documentation from her last two admissions, because she is confused about why her home oxygen prescription changed. Her adult son, who lives out of state, calls the unit and asks the nurse to summarize what is in her chart so he can 'stay in the loop.' Which response best reflects the client's legal right under HIPAA regulations?
- Tell the son that information can be shared with him because he is an immediate family member calling on the client's behalf.
- Tell Marisol that nursing notes are excluded from records clients are permitted to review.
- Explain to Marisol that she has the right to request and review her own medical record, and route her request through the facility's health information management process.
- Inform Marisol that only her primary health care provider can authorize her to view her own chart.