The HIPAA privacy rule states, "An individual has the right to inspect and obtain a copy of the individual's protected health information (PHI) in a designated record set." State any exceptions to the HIPAA privacy rule. The HIPAA regulation allows patients to access their records and the right to request that amendments be made to their records. In your post, address the following: What is the time limit in which the facility must respond if a patient requests a copy of his or her record or that an amendment be made to the record? Explain the policies and procedures that should be established by a facility to promote HIPAA security provisions.