Which of the following statements accurately describes the rights patients have to their medical records and the information contained therein?

a.The Health Insurance Portability and Accountability Act (HIPAA) created an ownership interest for patients in any medical record created by a hospital, physician, or other healthcare provider

b.Because medical records contain protected health information (as defined by HIPAA), patients must authorize all releases of their protected health information by the entity or person who keeps the medical records

c.Medical records belong to the healthcare practitioner or facility that creates them, though disclosure of information contained in the medical record to a third party generally requires a patient's consent

d.Healthcare facilities and practitioners have broad discretion when deciding whether to honor patient requests for access to their medical records