Records Access & Corrections

IDENTIFY THE COPY

What exists: email, notes, chart, video, report, database entry, attachment, audit log or later summary? Who created it, who maintains it, and for what purpose? Record dates, systems and likely custodians without assuming every requested item exists.

IDENTIFY THE REQUESTER

Are you the eligible student, parent with current rights, patient, authorized representative, member of the public or a party using litigation procedures? Personal access and public disclosure are not the same task.

IDENTIFY THE PROCESS

Access asks to inspect or obtain records. Amendment challenges specified information. A disclosure record/accounting addresses covered disclosures. A grievance challenges conduct or process. A merits appeal challenges a decision. Preservation asks that material remain available.

KEEP BOTH TRACKS VISIBLE

A request for records is not a substitute for an urgent safety response, substantive appeal, litigation deadline or case-specific preservation assessment. A particular law may nevertheless impose a records-specific preservation rule: see FERPA’s pending-request rule.

TWO CENTRAL CONDITIONS

The record must be directly related to a student and maintained by the covered educational agency/institution or a party acting for it. FERPA applies to covered education institutions; the requester’s age, attendance and rights transfer matter. See 20 U.S.C. § 1232g and 34 C.F.R. Part 99.

DO NOT ASSUME A FORMAT EXCLUSION

Email, electronic files, audio/video and other media can qualify when the definition is met. Conversely, merely mentioning a student does not settle the complete record-classification analysis.

EXCLUSIONS REQUIRE THEIR OWN FACTS

Genuinely sole-possession memory aids, specified employment records, law-enforcement-unit records and qualifying treatment records have distinct conditions. Student employment that exists because the person is a student is treated differently from ordinary employee-only records.

WHO CAN USE THE RIGHT?

Rights generally transfer when the student turns 18 or attends a postsecondary institution, regardless of age. The definition of student includes a person who is or has been in attendance. A former student can still have rights in retained education records; this does not require creation or indefinite retention of every possible record.

CHECK ALL CONDITIONS

For the specified older/postsecondary student, the records must be made or maintained by a physician, psychiatrist, psychologist or other recognized professional/paraprofessional acting in that capacity; made, maintained or used only for treatment; and disclosed only to treatment providers. The definition excludes remedial education and instructional-program activities from treatment. Read the actual rule.

PROFESSIONAL REVIEW IS A DISTINCT ROUTE

Under § 99.10(f), an institution need not provide ordinary FERPA access to qualifying treatment records. The student may have them reviewed by a physician or other appropriate professional of the student’s choice. Ask for the procedure and any separate policy or law that provides direct copies.

A DIFFERENT USE CAN CHANGE THE CLASSIFICATION

HHS guidance explains that disclosure for a non-treatment purpose can bring the records under FERPA education-record rules. Such disclosure may be permissible under consent or another FERPA exception; it is not automatically unlawful. Reclassification does not make the records publicly available.

CLASSIFICATION

The IPRA text reproduced in NMDOJ’s 2025 guide defines public records broadly by public-body custody/creation/maintenance and relation to public business. On that definition, a public institution’s student record can qualify as a public record while its protected contents are not publicly inspectable. This is a classification analysis—not a ruling on a particular file. Read the definition and source limitation.

DISCLOSURE

FERPA restricts disclosure of personally identifiable information from education records, with consent and specified exceptions. IPRA exceptions and segregation must also be examined. A member of the public does not acquire the eligible student’s personal access right simply by invoking IPRA.

PERSONAL ACCESS

The student can use the appropriate FERPA access route for education records even when a stranger could not receive them. Qualifying treatment records have their separate professional-review route. The recipient and purpose matter as well as the content.

THE ACCESS PERIOD

For covered education records, § 99.10 requires access within a reasonable period, no more than 45 days after receipt. That is not a universal wait of 45 days and is not the FERPA amendment or treatment-record clock. Authority and limits.

COPIES AND PRACTICAL BARRIERS

An electronic copy can be requested. FERPA does not create a universal right to one preferred export format. If circumstances effectively prevent inspection/review, the institution must provide a copy or make other arrangements. Describe the actual barrier rather than asserting an invented entitlement.

WHAT ELSE CAN BE ASKED?

Reasonable explanations and interpretations; the education records in identified systems; and the disclosure record required by § 99.32, where applicable. Search and retrieval fees are not permitted under § 99.11; copying fees have separate limits. Mixed-student records require attention to the information directly related to the requester.

DESIGNATED RECORD SET

The definition includes specified medical/billing records, health-plan enrollment/payment/claims/case-management systems, and records used in whole or part to make decisions about individuals. It can include records maintained for the entity. A portal or short visit summary need not exhaust the relevant set. Read § 164.501.

PSYCHOTHERAPY NOTES ARE NARROWER THAN MENTAL-HEALTH RECORDS

The HIPAA definition concerns separately maintained notes analyzing counseling conversations. It excludes medication information, test results and specified summaries such as diagnosis, treatment plan and progress. “A therapist wrote it” is not the test. This is distinct from FERPA’s treatment-record exclusion.

ACCESS AND FORMAT

Section 164.524 generally requires action within 30 days of receipt, with one qualifying extension up to 30 days. It addresses requested readily producible electronic format or an agreed readable electronic alternative, and limited reasonable cost-based copying charges. Read the rule and denial conditions.

STEP 1 · ASK FOR A SPECIFIC AMENDMENT

Under §§ 99.20–22, the institution decides within a reasonable time whether to amend information alleged inaccurate, misleading or in violation of privacy rights. State the record/date/page/field, present wording, proposed correction and supporting source. Use the amendment request.

STEP 2 · USE THE ACTUAL HEARING PROCESS

If the institution refuses, it must inform the requester of the hearing right. A hearing must be within a reasonable time and satisfy the rule’s notice, impartiality, evidence and written-decision requirements. A school official may serve if the person lacks a direct interest in the outcome. Request the hearing.

STEP 3 · PRESERVE DISAGREEMENT AFTER THE HEARING

After an adverse hearing result, the eligible student/parent can place a statement commenting on the contested information or explaining disagreement. The institution must maintain it with the contested portion while that portion is maintained and disclose it with that portion. Use the statement template.

ACTION AND EXTENSION

HIPAA § 164.526 requires action within 60 days of receipt, with one extension of no more than 30 days if timely written reasons and a completion date are supplied. The entity may require a written request and reason if it informs individuals of those requirements in advance. Read the authority.

IF ACCEPTED

The entity identifies the affected record and appends or links the amendment, informs the individual, and addresses required notification to relevant recipients. Ask which records were affected and identify recipients who need the correction. This is not a guarantee that every independent recipient’s historical file disappears.

IF DENIED

The notice must explain the applicable basis and disagreement/complaint process. Grounds include originator with an unavailability qualification, record-set/access scope and accuracy/completeness. A disagreement statement can be reasonably length-limited; an entity rebuttal must be supplied to the individual.

FUTURE DISCLOSURES

The rule requires linkage of the relevant amendment dispute material. With a disagreement statement, later disclosure of the disputed information must include the linked material or an accurate summary. Without a disagreement statement, the individual may request that the amendment request/denial or an accurate summary accompany later disclosure.

FERPA DISCLOSURE RECORD

Section 99.32 generally requires a record of specified requests for access and disclosures of personally identifiable information, subject to exceptions. Disclosures to the parent/eligible student, qualifying school officials, with written consent and certain other categories can be excluded. It is not a universal list of every employee who opened a file. Read the scope.

HIPAA ACCOUNTING

Section 164.528 covers specified disclosures within the six-year lookback, with significant exclusions—including treatment/payment/operations and authorized disclosures. Action is due within 60 days, with one qualifying extension up to 30 days. The first accounting within 12 months is free. Read the conditions. The lookback is not a universal medical-record retention rule.

ACCESS / AUDIT / AMENDMENT HISTORY

System access logs, EHR audit trails, version histories, correction approvals and record-routing logs may exist. Request identified existing records through the applicable access process and ask the holder to explain scope or withholding. Neither FERPA’s disclosure record nor HIPAA’s accounting automatically grants every internal log.

NEW MEXICO IPRA

Use the public body’s records custodian. The reproduced Act identifies name, address, telephone number and reasonably particular records for a written request; email and fax count as writing. Requested existing electronic records are addressed in the format in which they exist, subject to lawful withholding/segregation. Authority and source-version gate.

MAKE THE SCOPE SEARCHABLE

Give a date range, event identifier, record types and likely systems/custodians. Instead of “Why did they do this?”, identify existing emails, notes, policies, approvals or audit entries that may document the basis. Avoid bundling unrelated personal medical or student information into a public request.

FEDERAL FOIA

Use the correct federal agency/component and its published rules. Reasonably describe existing agency records and request the desired readily reproducible format. Fees, identity verification for personal information, exemptions and segregation require separate attention. Read § 552.

COVERAGE FIRST

The basic statutory individual definition covers U.S. citizens and lawful permanent residents. A system of records has a personal-identifier retrieval criterion. Check the agency, system notice, exemptions, eligibility and any other applicable law. Do not conclude a person has no possible access simply because one Privacy Act route does not fit. Read § 552a.

ACCESS AND AMENDMENT ARE SEPARATE REQUESTS

Identify the system and existing record as well as possible dates and identifiers. Use the agency’s accepted verification method rather than emailing identity documents to an unverified address. Where applicable, ask the agency to consider both FOIA and Privacy Act access, without pretending both necessarily govern.

THE AMENDMENT CLOCK IS NOT A TEN-DAY DECISION

Section 552a(d)(2) requires amendment-request acknowledgment within ten working days and a prompt amendment or refusal. Review of a refusal normally must be completed within thirty working days of the review request, subject to the agency-head good-cause extension. The statute does not supply a universal initial-access thirty-day deadline.

IDEA SPECIAL-EDUCATION RECORDS

For covered Part B records, § 300.613 requires access without unnecessary delay, before specified IEP meetings/hearings/resolution sessions and in no case more than 45 days after the request. Check the actual child/parent/agency context and applicable rights transfer; this is not every postsecondary student’s rule. Read the source.

SUBSTANCE-USE-DISORDER RECORDS

42 C.F.R. Part 2 applies to specified programs and records—not every reference to a substance use disorder. Section 2.23 does not prohibit giving a patient access to their own records. Other law supplies any applicable access entitlement, timing or amendment process.

INFORMATION BLOCKING

ONC identifies separate actor, practice, knowledge and exception questions for electronic health information. A missing record or unfulfilled format request is not automatically information blocking; failure to satisfy an exception alone is not enough. See the official gateway.

COURTS AND OTHER SPECIAL SYSTEMS

Federal FOIA does not govern federal courts. Court-case files, sealed/protected material and court administrative records need the correct clerk/rule route. Employment/personnel, vital records, juvenile, tribal and other specialized systems may have additional rules beyond this guide.

NAME THE EVENT

Record request sent, proper recipient’s receipt, request for clarification, decision received, hearing requested, production and referral separately. The date a draft was created is not necessarily the operative receipt date.

NAME THE PERIOD

Calendar days, working days, reasonable time, a published average and an appeal window are different. An agency’s investigation estimate does not extend a requester’s filing period.

ACCESS · REASONABLE TIME, NO MORE THAN 45 DAYS

For education-record inspection/review under § 99.10, count from receipt. Record any actual offered access and practical barriers. This is not the ordinary treatment-record professional-review clock. Rule and pending-request preservation.

AMENDMENT / HEARING · REASONABLE TIME

Section 99.20 uses a reasonable-time amendment decision. Sections 99.21–22 address the hearing and written decision within reasonable periods. No universal 45-day amendment/hearing number is supplied. Record the actual procedure and seek timely clarification. Read the hearing conditions.

FERPA COMPLAINT · 180 DAYS WITH THE CORRECT TRIGGER

Under § 99.64, the period runs from the alleged violation or when the complainant knew or reasonably should have known of it; SPPO may extend for good cause. This is a filing period, not SPPO’s time to resolve a case. Check the official complaint instructions promptly. Read the rule and route.

ACCESS · 30 DAYS; ONE QUALIFYING EXTENSION UP TO 30

Section 164.524 runs from receipt. For an extension, the entity must give written reasons and the completion date within the initial period. The ordinary maximum does not mean every other applicable rule permits avoidable delay. Access source.

AMENDMENT · 60 DAYS; ONE QUALIFYING EXTENSION UP TO 30

Section 164.526 uses a separate action period and timely written-extension conditions. Later recipient notifications involve additional reasonable-efforts/reasonable-time requirements. Amendment source.

ACCOUNTING · 60 DAYS; ONE QUALIFYING EXTENSION UP TO 30

Section 164.528 addresses covered disclosures, not every file view. Check exclusions and any authorized suspension rather than assuming an incomplete list proves wrongdoing. Accounting source.

HIPAA COMPLAINT · 180 DAYS FROM KNOWLEDGE

Section 160.306 uses when the complainant knew or should have known of the act/omission; the Secretary may waive the period for good cause. It is not 180 days from completion of every internal process, and it is not a promised OCR decision date.

IPRA · PROMPT INSPECTION; 3 BUSINESS / 15 CALENDAR DAYS

The reproduced Act calls for inspection as soon as practicable, with written advice within 3 business days when inspection is not permitted within that period. The general 15-calendar-day outside inspection period has an excessively-broad/burdensome-request provision allowing a reasonable additional period with notice within 15 days. It is not an unconditional “all files by day 15” guarantee. Current-codification gate and actual text.

FOIA · ORDINARY 20-WORKING-DAY DETERMINATION

The proper-component receipt/routing rule, permitted tolling and unusual-circumstances extension provisions matter. A determination is not necessarily completed production. The adverse-decision appeal window must be at least 90 days; the ordinary appeal-determination rule is 20 working days, subject to applicable provisions. Expedited-processing decisions have a separate 10-day rule. Read § 552.

PRIVACY ACT · TEN-DAY ACKNOWLEDGMENT IS NOT A DECISION

Amendment acknowledgment: 10 working days, excluding Saturdays, Sundays and legal public holidays. Action must be prompt. Review of amendment refusal: normally 30 working days from the review request, with an agency-head good-cause extension. Check agency-specific initial-access rules. Read § 552a(d).

USE THE OFFICIAL ACCEPTED ROUTE

Verify the office, portal or published address and any required form/signature/identity step. Request accessible electronic delivery where suitable, but do not assume every office must accept the same format or that every transmission is secure.

SAVE THE ACTUAL SUBMISSION

Retain the final message, native email with headers when available, attachments, portal export/confirmation, timestamp and time zone, reference number and any bounce or error. A screenshot supplements rather than replaces the original message or file when that original exists.

KEEP PRODUCTION IN LAYERS

Store the received file unchanged, record its source/acquisition time and work on a copy. Preserve original filenames in the index even when creating descriptive working filenames. A checksum can help detect byte changes; it does not prove factual truth, lawful receipt or when a file was created.

FERPA · SCHOOL PROCESS + SPPO

Begin with the office that holds the education records; use the amendment/hearing process when that is the issue. SPPO receives FERPA complaints through its current form and published route. Its page encourages school resolution but does not require it for every FERPA complaint. Do not confuse SPPO with Education OCR discrimination intake. Law and complaint clock.

HIPAA · HOLDER + HHS OCR

Use the covered entity’s access/amendment/privacy process. HHS OCR’s complaint gateway addresses possible HIPAA noncompliance; it is not the office that ordinarily supplies a provider’s chart. Keep a 180-day knowledge-trigger complaint question separate from the entity’s action period.

IPRA · CUSTODIAN + AVAILABLE ENFORCEMENT

Request the stated reason for withholding and segregable portions; preserve the request and response. NMDOJ provides an enforcement/complaint gateway. Its reproduced Act also addresses court enforcement without an administrative-exhaustion requirement; current procedural/remedy advice requires separate verification. Read the source gate.

FOIA · AGENCY APPEAL AND OGIS

Use the agency’s FOIA Public Liaison and actual administrative appeal instructions. OGIS offers neutral federal FOIA dispute assistance; it is not a state-records appeal office or the requester’s lawyer. Do not presume OGIS contact pauses a deadline. Read the FOIA card.

PRIVACY ACT · THE AGENCY’S RECORD-SYSTEM PROCESS

Find the agency privacy/records office and its system-specific access/amendment/review instructions. The generic Privacy Act label does not identify a single universal appeal form or initial-access deadline. Read the governing text.

INFORMATION BLOCKING · ONC GATEWAY / HHS OIG ROLE

The official page links the claim portal and explains ONC certification review and HHS OIG’s investigative authority. Actual actor, knowledge, practice and exceptions matter. The route is not automatic compensation or proof that a delayed record is unlawful.

COURT RECORDS · THE RIGHT COURT AND CLERK

The NM Courts gateway distinguishes requests for court-case material from court administrative records. Ask the proper clerk about access, copies, sealing, correction and any case-specific rule. An IPRA request is not a motion to amend a judicial ruling.

NO RECORDS / NOT HELD / NOT FOUND

Those are different from withheld or redacted. Compare your scope with the search described. Ask for clarification and the proper holder if known; request existing search/transfer/disposition records where appropriate, without claiming a universal right to newly written explanations.

PARTIAL PRODUCTION

List the missing categories by request item number, dates and filenames. Note that another student/person’s information, a legal exception or a format issue can require separate treatment. Ask for the actual basis and any available segregable portion or alternate access method.

AMENDMENT REFUSAL

Compare the specific ground with the applicable framework. FERPA’s hearing/statement sequence differs from HIPAA’s written disagreement and rebuttal process. A refusal to amend does not itself mean the underlying information is correct.

WHAT THIS CANDIDATE CONTAINS

A records classification/access/amendment workflow, sixteen reusable tools, thirteen internal authority cards and versioned source/clock records. Legal information and organization tools—not legal representation or an assessment of any person’s case.

WHAT WAS VERIFIED

A fresh scoped official-source text pass for the new records material. Federal Code resolving links and eCFR editions are identified distinctly; the NMDOJ statutory reproduction remains labeled. The source ledger records access date, text edition, checked propositions and open limitations.

WHAT REMAINS OPEN

Current official NM IPRA codification/controlling treatment; complete inherited Atlas source/contact recertification; case-specific vehicles, remedies and deadlines; independent legal review; physical printing and assistive-technology/keyboard testing. The accompanying QA report states actual visual/mechanical review scope.

UPDATES / CORRECTIONS

No stable public corrections address or update website has been supplied. Obtain a later edition through the person who supplied this review copy and independently check the linked official text. No automatic update or monitoring is promised. Preserve old editions and material correction history.