A patient approaches the front desk requesting to inspect their medical records. They express some concerns about potential errors they want to review. According to HIPAA regulations, what is the most appropriate response?
Inform the patient of the procedure to request and inspect their records, including any potential costs for copying.
Advise the patient that they can only inspect their records if they provide a reason deemed valid by the office manager.
Inform the patient that medical records can only be inspected by their current healthcare provider for continuity of care purposes.
Tell the patient that their records cannot be inspected because the risk of a privacy breach is too high.