Patients, physicians, and hospital administrators in the USA often lack a clear understanding of the rights patients have over their medical data governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). A study found that there's a significant underestimation of patients' rights to their electronic health records (EHR) data among all three stakeholder groups. To address this, experts suggest better education for patients, adding summaries of patient rights to HIPAA authorization forms, and considering reforms like giving patients the right to destroy data and the right to transfer data ownership to third parties.