Little known fact: under HIPAA, patients have the right to request restrictions on the disclosure of their PHI if they pay for services entirely out of pocket. This means their provider must honor their request not to bill their insurance and keep their information private from health plans.