Skip to main content

Interoperability & Patient Access Final Rule

Patient access

  • You have a right to see your health information and medical records.
    • You have a right to see your health information because of a law called the Health Insurance Portability and Accountability Act of 1996 or HIPAA.

  • Your medical records help you know more about your health.

  • You decide who gets to see your health information.

  • Getting your Oregon Health Plan medical records is easier than before.
    • You can get your medical records on your phone.

  • You can get the following information:
    • Services you received (Adjudicated claims)
    • Description of costs (Provider remittances)
    • Clinical data (labs, vitals and other data)
    • Medication prescribed (Formulary data)
    • Information about your provider or doctor, including their specialty and how to contact them. (Provider names, Addresses, Phone numbers, Specialties)
  • You can get your EOCCO medical records from 1/1/2016 to now using an app or website.

Tips for privacy and security

  • Use a trusted app or website to get your health information.

  • Read the fine print. Check the terms and conditions before you sign up to make sure the app or website does not share or sell your information.

  • Use strong passwords. Change them often to keep your information safe.

  • Don’t share your health information or ID numbers on social media.

  • Use encryption apps or software for extra security.

HIPAA and privacy violations

  • Your health information is private and should be protected.

  • Clinics, providers, health plans and the State of Oregon have to follow HIPAA rules to keep your health information safe.

  • Be careful when sending your health information to an app or website. Apps and websites do not have to follow the same health privacy rules as OHP or your doctor.

  • If you believe your health information was not protected, you can file a complaint.

  • Complaints about providers, clinics, health plans and other medical organizations
    File a health information protection complaint with the Office for Civil Rights in the U.S. Department of Health and Human Services.
    • The Office for Civil Rights (OCR) investigates complaints against people and organizations who follow HIPAA rules, like providers and health plans.
  • Complaints about apps, websites, and other businesses.
    File a privacy and online security complaint with the Federal Trade Commission.
    • The Federal Trade Commission (FTC) investigates violations of online security, fraud, and bad business practices.

Key Resources for You

Call us if you need a different format or help in another language, large print, Braille or other formats. This is free of cost to you.


Customer Service: 888-788-9821 (TTY users: 711)
Hours: Monday through Friday, 7:30 a.m. to 5:30 p.m. PST

EOCCO members should have their member ID number ready for quicker help.

See more options