---
title: "List what a practice proposes to upload, without a health-record finding"
url: "https://ailawframework.com/practice/health-and-medical-law/check-a-provider-s-my-health-record-access-and-upload-practice-against-t/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A32-NE20261022-3-US"
practice_area: "Health & Medical Law"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# List what a practice proposes to upload, without a health-record finding

> List the categories of information the practice proposes to upload or view, in the proposal's words. Do not say the upload is permitted and do not apply a national health-record system.

Canonical page: https://ailawframework.com/practice/health-and-medical-law/check-a-provider-s-my-health-record-access-and-upload-practice-against-t/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Health & Medical Law](https://ailawframework.com/practice/health-and-medical-law.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | List the categories of information the practice proposes to upload or view, in the proposal's words. Do not say the upload is permitted and do not apply a national health-record system. |
| What the lawyer must review | You decide the disclosure. No national electronic-health-record statute of the kind in the source task was opened. If the information is protected health information, 45 CFR § 164.502(a) bars a use or disclosure the subpart does not permit, and § 164.524 gives an individual a right of access to protected health information in a designated record set, with action no later than 30 days after the request, and one extension of no more than 30 days. Access by the individual is not permission for the practice to upload the record to a system. You read the denial grounds before you refuse access. Model Rule 1.6 applies to client information that is not protected health information. Formal Opinion 512 applies before the records go into a tool. |
| Written for | United States |
| Applies to | [Check a provider's My Health Record access and upload practice against the published rules](https://ailawframework.com/practice/health-and-medical-law/check-a-provider-s-my-health-record-access-and-upload-practice-against-t.md) |

## Checking plan

- What the AI does: List the categories of information the practice proposes to upload or view, in the proposal's words. Do not say the upload is permitted and do not apply a national health-record system.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- Do not treat § 164.524 as authority to upload a record to a shared system.
- The 30 days run only after you decide the section applies.

## Sources

- [45 CFR § 164.502 (uses and disclosures of protected health information)](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502) (checked 2026-10-22)
- [45 CFR § 164.524 (access of individuals to protected health information)](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.524) (checked 2026-10-22)
- [ABA Formal Opinion 512, Generative Artificial Intelligence Tools (29 July 2024)](https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf) (checked 2026-10-22)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*