What must a Healthsource Chiropractic Business Associate maintain for each individual patient regarding PHI?

According to the 2025 Healthsource Chiropractic Franchise Disclosure Document, a Business Associate must maintain a designated record set for each individual patient for whom it has Protected Health Information (PHI), as defined by HIPAA. This designated record set must include all PHI pertaining to that individual patient.

Furthermore, Healthsource Chiropractic's Business Associate must make all PHI in that designated record set available to the individual to whom the information pertains, or to their representative, upon request. This ensures that patients have access to their own health information, as mandated by HIPAA regulations.

In addition to providing access to the designated record set, the Business Associate must also provide an accounting of disclosures, if required, in accordance with HIPAA. This includes collecting and maintaining a record of disclosures for at least six years prior to the request, though accounting of disclosures from an electronic health record for treatment, payment, or health care operation purposes are required to be collected and maintained for only three years prior to the request. This accounting must include the date of disclosure, the name and address of the entity or person who received the PHI, a brief description of the PHI disclosed, and a statement of the purpose of the disclosure.