Myth #3: The Privacy Rule does not give patients new rights. FACT: The Privacy Rule affords Americans important new rights, including the right to access, amend, and request stronger protections for their health information. Under the Privacy Rule, patients are granted the right to see and copy their own medical records. The law requires health care providers to respond to patient requests within 30 days and mandates that only a reasonable fee be charged. Furthermore, patients have the right to request that a provider amend personal health information in their record. If the provider denies that request, the patient may append a statement of disagreement to their medical record. The Privacy Rule also requires providers to have safeguards in place to protect health information and prohibits many disclosures for purposes other than treating patients and paying for health care. In addition, patients have a right to request stronger privacy protections for their health information. Health care providers and plans must notify patients about their rights through a “notice of privacy practices,” which must also include information about how patients' health information will be used and disclosed. In addition, the notice must inform patients of their right to file a complaint with HHS if they believe there has been a violation of the law.