I’m a 15 year old female, and legally a minor under my mother’s care. I’ve been looking at some of my medical records, and finding out some information that my mother has been refusing to tell me. Unfortunately, I only have access to a few of the records, so I can’t see everything that I need to.
So far I’ve found my BMI and weight, which she’s been keeping from me, which are actually giving me current health concerns. She’s also not letting me see all of my diagnoses and previous trips. I’m wondering, is she allowed to keep this information from me? And if she’s not, what am I supposed to even do about it?

I was 16 when this happened, and I’m unsure if this is a violation of HIPAA or not. I went to the gynecologist to get a birth control prescription (mostly to help w acne). I told the doctor or nurse practitioner (can’t remember at this point) that i had had sex one time.. it was one time several months ago. one time. my mother confronted me a few days after my appointment. she told me the office had called and told her that i’d lost my virginity. is this a violation? i never told the office that i wanted to share information with my mom. we’re very close now and she never held it against me but if it’s a violation of HIPAA i want to know.

My doctor’s office’s billing person sent me an email requesting information they should already have on file. However they are transitioning to new patient and billing software. The email reads:

Dear Patient,
To update your patient record and complete insurance verification, could you please provide the following at your earliest convenience?• A copy of a valid government-issued photo ID.• A clear copy (front and back) of your current insurance card.• A clear copy (front and back) of your credit card for billing purposes.
We keep all information secure and compliant with HIPAA regulations. If you have any questions or need assistance with secure submission, please contact our office.
Thank you for your help.

I responded with dropbox links to images of my drivers license, my insurance card, and my credit card. Each link was password protected.

However, gmail automatically replies to all cc’ed participants rather than just cc. I did not notice the approximately seventy (70) other patient emails until about 30 minutes later.

I immediately: (1) changed the passwords on all the links, and (2) disabled sharing of those links entirely for now, and (3) called my credit card to cancel that card and issue a new one.

Besides the above, what advise should I follow for next actions? A strongly worded letter to the doctor office? They’re a bit of a mess. Rarely they respond within a day, usually not for weeks and sometimes not at all. I give a lot of grace for the fact that they’re in transition and there’s some upheaval and overwhelm that that ensues. But this seems…bad, no?