Which regulation primarily governs the release of medical records?

The regulation that primarily governs the release of medical records is HIPAA, which stands for the Health Insurance Portability and Accountability Act. HIPAA establishes national standards for the protection of individually identifiable health information. It sets strict rules regarding the confidentiality, integrity, and availability of protected health information (PHI), including the conditions under which medical records can be disclosed.

Under HIPAA, healthcare providers, health plans, and healthcare clearinghouses—referred to as covered entities—must ensure that PHI is not disclosed without patient consent, except in specific circumstances such as treatment, payment, and healthcare operations or when required by law. This regulation gives patients rights over their health information, including the right to access their records and request corrections.

In contrast, the other regulations listed serve different purposes. FERPA relates primarily to the privacy of student education records, the Sarbanes-Oxley Act focuses on corporate financial reporting and accountability, and the Affordable Care Act primarily addresses healthcare coverage and insurance reforms rather than the specific release of medical records. Thus, HIPAA is the correct answer as it specifically outlines the rules and regulations governing the release and protection of medical records.