In the United States, in accordance with HIPAA requirements, the lab who performed a blood test on a patient are required to send the results to the patient no later than 30 days from the date of patient's request.
A patient requested multiple times their results (face-to-face during the blood test day, then by phone and emails). The lab eventually sent the patient the full results 3 months after the blood test, i.e. 3 months after first requested their results.
Where can the patient report this infraction of the HIPAA requirements?
If the answer is state-dependent, I'm mostly interested in California and Massachusetts.
The U.S. Department of Health and Human Services (HHS) ruling, effective April 7th, 2014, allows patients in all states to have access to their lab results directly from Quest Diagnostics within 30 days.
Under the new rule, labs will be required to provide patients copies of their lab test results within 30 days of a request.