164.502(a)(2)(i)

Uses and disclosures of protected health information : A covered entity must provide individuals with their own health information upon request