Can a patient's advocate obtain the patient's medical records?
A patient advocate has no legal right allowing access to the
designated record set, unless the patient allows it. The vehicle
for such allowance is defined under HIPAA in the US as the
Authorization. Authorization requirements are listed under the
HIPAA Privacy Rule. Be forewarned -- they aren't 100% intuitive so
plan your Authorization per the stated rules.