Access to medical records should be easy. Do not use a HIPAA Authorization form, or overcharge patients for copies if you want to comply with HIPAA. This is a hot button issue right now at the Office for Civil Rights (OCR) so it’s important to handle patients’ requests for their own records the right way.