HIPAA requires that patients be able to access copies of their health data! If patient requests it in electronic form, must be provided in electronic form if data is stored that way! A portal is not required – but is a convenient way of getting patients copies of data they are likely to find relevant (vs. waiting for them to ask for it)..