If patients request copies of their medical records as permitted by the Privacy Rule, they may be required to pay for the copies. The covered entity may impose reasonable, cost-based fees. The fee may include only the cost of copying (including supplies and labor) and postage, if the ….