ROI request — full review

The complete production, assembled for human review before anything is released. What follows is exactly what fulfilment would disclose — and, just as explicitly, what it would withhold and why.

Patient (self)

requester · patient · purpose: patient_request

103

records in the production

records withheld — itemized below, never silent

Release requirements — jurisdiction NY

Every requirement of the applicable jurisdiction, evaluated by the validator against this request's actual authorization. The validator can block a release; it can never approve one — the decision below remains yours, and every evaluation is recorded.

Requirement	Authority	Verdict	Basis
Authorization signed and dated HARD	45 CFR §164.508(c)(1)(vi)	met	Signed 2026-08-20.
Authorization not expired HARD	45 CFR §164.508(c)(1)(v)	met	Valid through 2027-02-20.
Description of information with specificity	45 CFR §164.508(c)(1)(i)	met	Patient access request under §164.524 — this authorization element does not apply.
Right-to-revoke statement present HARD	45 CFR §164.508(c)(2)(i)	met	Patient access request under §164.524 — this authorization element does not apply.
Part 2-specific consent where SUD records are in scope HARD	42 CFR §2.31	met	Patient access request under §164.524 — this authorization element does not apply.
HIV-related information requires a HIPAA-compliant authorization that covers it	NY PHL Art. 27-F §2782	met	Patient access request under §164.524 — this authorization element does not apply.
Mental-health records released consistent with MHL §33.13	NY MHL §33.13	met	Patient access request under §164.524 — this authorization element does not apply.

What fulfilment would release

Record class	Count	Contents
Demographics	1	Name, MRN, DOB, sex, address, payer
Conditions	14	Impacted tooth; Educated to high school level (finding); Misuses drugs (finding); …
Medications	5	Acetaminophen 325 MG Oral Tablet; Amoxicillin 250 MG Oral Capsule; Hydrochlorothiazide 25 MG Oral Tablet; …
Encounters	24	Visit history with dates, types, providers, facilities
Labs & vitals	50	Result series with values, units and abnormal flags
Clinical notes	1	Progress note · full text released
Imaging studies	0	Modality, body site, report status
Claims & billing	8	Claims with service lines and adjudication (in scope for this requester type)

What fulfilment would withhold

Withheld	Count	Rule
Psychotherapy notes	3	Never released through ROI — separate store, separate authorization lane (45 CFR §164.508(a)(2)).
Sensitive — sud_part2	6	42 CFR Part 2: released only with Part 2-specific consent for this disclosure.
Sensitive — mental_health	1	Sensitive category: excluded absent specific consent for this disclosure.

Patient-request note. Part 2 restricts redisclosure to third parties; a patient's own access request is handled under the access right. Sensitive categories other than psychotherapy notes are releasable to the patient; the counts above reflect what this production includes.

Both outcomes are audited (roi.fulfilled / roi.denied) with your name and the session's purpose.

✦ AI Second-pass leakage review

Classification cleared this production set at the door; the reviewer is the second pass — it reads the full text of every cleared document hunting for sensitive content a classifier can miss: a Part 2 mention buried in an ordinary note, a psychotherapy reference in a discharge summary. It quotes every risky line. The release decision stays yours.