FILL INTHE BLANK under the hipaa privacy rule, when an individual asks to see his or her own health information, a covered entity_____ . must always provide access can deny access to psychotherapy notes can demand that the individual pay to see his or her record can always deny access