To require organizations holding medical patients' records to provide information to the patient or his/her representative within ten days of request, and to give patients access to reports about those with whom the organizations have shared the information.   Official Text and Analysis.