Your rights
Access, correction, deletion — and what US law expects from your care team.
Whatever country you're in, you have rights over your health information. This page describes them in plain language — your clinic is the one who must honor them, and KTB gives them the tooling to do it.
In the United States
If your care team is a US covered entity, the HIPAA Privacy Rule gives you the right to:
- Access — inspect and get a copy of your records, including the visit notes created with KTB.
- Amend — request corrections to records you believe are inaccurate or incomplete.
- An accounting of disclosures — know who your information was shared with.
- Restrictions — ask that certain uses or disclosures be limited.
KTB is not itself a HIPAA covered entity — your clinic is. The software supports these rights (exportable records, audit trails, access controls), but honoring them is the clinic's obligation.
Everywhere else
- Brazil (LGPD): you can confirm, access, correct, anonymize, delete, and port your data. Consent can be withdrawn at any time.
- EU/UK (GDPR): similar rights — access, rectification, erasure, portability, and the right to object.
Your care team should tell you which rules apply to you.
How to exercise them
- Ask your clinic directly — they are the data controller and handle these requests.
- Request your records — clinicians using KTB can export your file in FHIR R4 or openEHR format; ask for it in whatever form is convenient.
- Decline recording — you can always refuse transcription. Your clinician can document without it.
If something goes wrong
If you believe your rights were violated, contact your care team first. If unresolved, you can escalate to your local health-data authority (HHS OCR in the US, ANPD in Brazil, your national DPA in the EU).