Accounting-of-disclosures request: dates, fee and exposure

You type the date a patient's accounting-of-disclosures request was received. It returns the 45 CFR 164.528 deadline sixty days later, the date the single thirty-day extension would move you to, the six-year lookback start, whether this accounting must be free, how many log entries are reportable after treatment, payment and operations entries come out, and the days you are early or late.

Privacy officers, HIM and release-of-information staff, and practice managers at US covered entities and business associates who log disclosures and answer patient requests. It is built for people holding a stack of requests with different receipt dates who need each clock separately rather than one policy document that says sixty days.

General assistants still answer with a three-year electronic-record accounting period. That expansion was proposed under HITECH in 2011 and no final rule ever took effect, so six years is what applies. Chatbots also date the clock from the day staff opened the chart instead of receipt, and they do not know your prior accounting date, which decides whether you may charge.

Every calculation is free forever: deadlines, extension date, lookback start, fee status, reportable entry count and overdue exposure, with no key, no sign-in and no usage limit. The twenty-nine dollar licence key adds two things on a different axis: exporting your answered requests to a .csv for the binder, and browser alarms thirty, fourteen and one day before a deadline.

Independent HIPAA consultants bill roughly one hundred fifty to three hundred fifty dollars an hour in 2026, and small-practice compliance retainers run two hundred to fifteen hundred dollars a month. One accounting answered after day sixty starts at one thousand four hundred sixty-one dollars per violation under the OCR amounts effective January 28, 2026.