What Can Patients See on Epic? MyChart Access Explained

Hospital Waiting

Patients see their Epic records through MyChart, Epic's patient portal. Depending on how their health system sets it up, they can view medications, test results and bills, schedule care, share their records, manage care for family members and connect with their doctor virtually. Federal information blocking rules make sharing electronic health information the expected norm, so much of it appears quickly.

This guide is for patients wondering why their portal looks the way it does, and for health system leaders who need to configure and explain it.

Key takeaways

  • Patients see Epic data through MyChart, not the clinician-facing Epic system.
  • Each health system controls many settings, so two MyChart accounts can look quite different.
  • The 21st Century Cures Act made sharing electronic health information the default, which is why results often arrive before a phone call.
  • Information can be held back only when a practice fits a defined regulatory exception.
  • Portal access sits alongside, not in place of, the HIPAA right to get copies of your records.

What can patients see in MyChart?

Epic is the electronic health record clinicians use; for background, see our guide on what Epic software is used for. MyChart is the patient-facing window into that record. According to the official MyChart site, patients can:

  • View medications, test results, bills and more.
  • Find and schedule care near them.
  • Access and share their information in one place.
  • Manage care for themselves and their family.
  • Connect with their doctor virtually.
  • Use one login for all their care.

What shows up in practice depends on the health system. One organization may switch on online scheduling for every specialty while another limits it to primary care. If a feature you've seen elsewhere is missing, it's usually a local setting, not a limitation of the patient.

Why do results and notes show up so fast?

HealthIT.gov explains that the 21st Century Cures Act "made sharing electronic health information the expected norm in health care" and authorized HHS to identify reasonable activities that are not information blocking. Information blocking is a practice by an "actor" that is likely to interfere with the access, exchange or use of electronic health information. The rules apply to three kinds of actors: healthcare providers, developers of certified health IT, and health information exchanges or networks. The exceptions are set out in 45 CFR Part 171.

In practice, that's why many patients now see lab results, imaging reports and visit notes in MyChart before their clinician has called. A common scenario: a patient gets a portal notification on a Friday evening, opens an abnormal result with no explanation and can't reach anyone until Monday. Holding information back is acceptable only when the practice fits an exception. If a practice doesn't meet one, HealthIT.gov says it is evaluated case by case rather than automatically labeled information blocking.

What might patients not see, or see later?

Information typeTypical visibilityWhy it may differ
Lab and imaging resultsUsually released to the portalA specific result may be held only where an exception applies
Clinical notesCommonly visibleSpecific notes may be withheld if they meet a recognized exception
Proxy access for minorsParents can usually manage a young child's accountAdolescent confidentiality settings vary by state law and system policy
Records from other organizationsVisible when linkedDepends on whether the other organization connects to the patient's account
BillsVisibleDepends on whether the health system handles billing in Epic

If something is missing, the fastest route is usually the health system's health information management (medical records) team or its patient portal support line.

Portal access vs the HIPAA right of access

MyChart is a convenience, not the limit of what you're entitled to. HHS explains that you have a right to see and get copies of your medical and billing records from covered providers and health plans. A provider can't refuse a copy because you haven't paid for services, may charge reasonable copying and mailing costs, and can't charge a fee for searching for or retrieving your records. Our article on EHRs and patient privacy under HIPAA covers the compliance basics.

What should health system leaders do?

  1. Review release settings. Make sure any delay is documented and tied to a specific exception, not habit.
  2. Prepare clinicians. Train teams on writing notes patients will read and on following up quickly on abnormal results, including after-hours releases.
  3. Set proxy policies. Define adolescent and adult proxy access in line with state law.
  4. Explain it to patients. Tell patients they may see results before their clinician calls, and how to ask questions.
  5. Protect accounts. Strong identity verification and multi-factor authentication reduce account takeover risk. Our article on how Epic protects data covers the technical side.
  6. Track usage. Activation and message volumes tell you whether the portal is working; our piece on whether patient engagement improves outcomes explains why that matters.

How can patients get the most from MyChart?

Patients often miss features simply because they never explore the portal. A few habits help:

  • Turn on notifications so new results and messages aren't missed.
  • Review the medication list before each visit and report anything out of date.
  • Use the sharing option when you see a specialist outside your health system instead of waiting for faxed records. Shared data only works well when systems speak common standards, which is the subject of our explainer on vendor-neutral healthcare data.
  • Set up proxy access for children early. Adult children helping aging parents should ask how formal proxy access works rather than sharing a parent's password.
  • Download or share copies of key records before switching health systems, so nothing gets lost.

Frequently asked questions

Can patients see doctors' notes in Epic?

In most health systems, yes. Under federal information blocking rules, clinical notes are generally shared with patients through MyChart. A specific note can be withheld only when the situation fits a recognized exception, so if a note you expect is missing from your record, ask the health system's medical records team directly.

Why did I see my test result before my doctor called?

Federal rules made sharing electronic health information the expected default, so many results are released to MyChart as soon as they're finalized, and your clinician may not have reviewed them yet. If a result worries you, contact your care team or call the office rather than waiting or searching online for answers.

Can I see records from other hospitals in MyChart?

Often, yes. The MyChart site describes accessing and sharing your information in one place with one login for all your care, but it depends on whether the other organization connects to your account. If it doesn't, you can still request copies directly from that provider under your HIPAA right of access.

What to do next

  • Patients: log in, check each section listed above and contact your health system about anything missing.
  • Patients: turn on notifications and set up proxy access for anyone whose care you manage.
  • Health system leaders: audit release and proxy settings against the information blocking exceptions.
  • Health system leaders: make sure patient communications explain what appears in the portal and when.

Last reviewed: October 2026.

Sources

Comments

Post a Comment

Popular Posts

Why Workday Onboarding Breaks Down for Frontline Employees

Image
Workday onboarding breaks down for frontline employees because its default setup assumes every new hire has an email address, a personal device, time at a desk and comfort with a web portal. Warehouse, retail, food service and healthcare aide roles often have none of those. The fix is mostly configuration and process, not a new system. This guide is for HR, HRIS and operations leaders who run Workday and keep seeing incomplete onboarding records, late I-9s and new hires who quit before their first paycheck. Key takeaways Default Workday onboarding is built around desk workers. Frontline failures are predictable and mostly fixable through configuration. The five usual breakpoints are email-based logins, no reliable device, digital comfort, shift timing and language. Split compliance-critical tasks (I-9, tax forms, direct deposit) from tasks that can wait, and handle I-9 in person. Kiosks, ID-based logins, text reminders and a supervisor checklist close most of the gap. Measure...
Read more

Interview Tips for Beginners: A Step-by-Step Prep Plan

Image
The best interview tips for beginners come down to preparation you can repeat: study the job description, research the employer, prepare four to six short stories that prove your skills, practice answering out loud, prepare your own questions and follow up within a day. Confidence comes from rehearsal, not from experience you don't have yet. This plan is for students, recent graduates and career changers facing their first few interviews, and for anyone who freezes when asked "tell me about yourself." Key takeaways Match your preparation to the job description, line by line. Use the STAR format (situation, task, action, result) for behavioral questions. School, volunteer and part-time examples count when you have little work history. Practice aloud at least twice; silent rehearsal isn't enough. Prepare two or three thoughtful questions for the interviewer. What does a one-week interview prep plan look like? If you have an interview scheduled, this plan s...
Read more

How to Improve the Customer Experience (CX)

Image
To improve customer experience, find the moments where customers struggle most, fix those first, and make good service consistent across every channel. Then close the loop on feedback, give front-line staff the time and tools to solve problems, and track a small set of metrics someone actually owns. This guide is for leaders and managers who own some part of the customer relationship, whether that's support, sales, operations or the product itself. Customer experience is the sum of every interaction someone has with your company, from the first ad they see to how a return is handled years later. Teams that struggle usually confuse a good satisfaction score with real improvement, or fix the wrong things. Key takeaways Look at behavior (drop-offs, ticket spikes, failed searches), not just surveys. Fix the biggest sources of friction before polishing what already works. Collecting feedback and doing nothing with it makes customers more frustrated. Consistency across people a...
Read more

How to Market Your Handyman Services to Small Business Owners

Image
To market handyman services to small business owners, position yourself as the reliable, flexible vendor who can handle many small jobs with little disruption. Make your Google Business Profile and website clearly commercial, pick two or three business types to target, visit them in person, offer a simple service account, and ask every client for reviews and referrals. This is for independent handymen and small maintenance crews who rely on word of mouth and want a steadier flow of repeat commercial work. Referrals are great until they dry up for a month. Small businesses are a strong target because they have constant maintenance needs, little in-house help, and a clear preference for vendors they can call again and again. Key takeaways Business owners buy speed, reliability and minimal disruption, not just repairs. Say that in your marketing. Your Google Business Profile should clearly describe commercial work and the business types you serve. Focus on a few business types (r...
Read more

Are Biometrics Better Than Passwords? What NIST Says

Image
Biometrics beat passwords in some ways and lose in others. You can't forget a fingerprint, reuse it across sites or type it into a phishing page, so logins get faster and harder to steal. But you can't change a face if its data leaks, which is why NIST says a biometric should never be used alone, only alongside a physical device. This guide is for IT, security and HR leaders deciding how far to move their workforce away from passwords. Key takeaways Biometrics fix common password problems: reuse, weak choices and forgotten credentials. NIST SP 800-63B says a biometric "is not recognized as an authenticator by itself." The strongest pattern is a biometric that activates a key stored on a device, as with passkeys and security keys. Workplace biometrics bring notice, consent and retention duties under some state laws. Always offer a non-biometric alternative. Why do passwords keep failing? Passwords depend on people choosing, remembering and guarding secret...
Read more

Are Mobile Apps Tracking Your Every Move? How to Check

Image
Mobile apps can track your location and activity, but only as far as the permissions on your phone allow. Open your privacy settings, find apps with "always" location access, switch most to "while using" or off, limit your advertising identifier and delete apps that ask for more than they need. Ten minutes covers most of it. This is for anyone who has noticed ads that seem to know where they've been, or who simply hasn't looked at app permissions since setting up the phone. Key takeaways Location, contacts, photos, microphone and camera access are all controlled by per-app permissions. Background ("always") location access is the setting most worth reviewing. Advertising identifiers let companies link your activity across apps; you can limit or reset them. Turning off location doesn't stop account-based tracking inside apps you sign in to. Work phones can carry extra monitoring set by your employer, governed by company policy. How ...
Read more

Predictive Scheduling Laws: Where They Apply and How to Comply

Image
Predictive scheduling laws require covered employers to give hourly workers their schedules in advance, usually 14 days, and to pay a premium when the employer changes a shift after posting. Oregon has a statewide law, and cities including Seattle, New York City, Chicago, Los Angeles, San Francisco and Philadelphia have their own ordinances. This guide is for HR, operations and payroll leaders who schedule hourly staff in retail, restaurants, hospitality and similar industries across more than one location. This article is general information, not legal advice. Key takeaways The federal Fair Labor Standards Act has no rules on scheduling adult employees, so predictive scheduling (also called fair workweek or secure scheduling) duties come from state and city law. Oregon, Seattle, Los Angeles, Philadelphia and New York City fast food all require schedules at least 14 days in advance for covered workers. Coverage usually depends on industry plus a size threshold, such as 500 emp...
Read more

Dollar General Store Walkout: Lessons for Retail HR

Image
In March 2024, every employee at a Dollar General store in Mineral Point, Wisconsin, quit at once and taped "We quit" signs to the doors. They cited a lack of appreciation, being overworked and being underpaid, plus a dispute over a rule about which unsold items could be donated. The store reopened about three hours later. The story went viral because it was so visible, but the lesson is quieter. For HR and operations leaders who run hourly, small-team locations, this is a case study in how a minor policy can become the last straw. Key takeaways A policy change triggered the walkout, but the notes employees left pointed first to workload, pay and recognition. Rules that clash with frontline values, such as throwing away usable goods, become flashpoints when trust is already low. Explaining why a rule exists, and giving local teams a way to push back, costs far less than losing a whole store team. Treat a mass resignation as a lagging indicator. The warning signs show...
Read more

Boss Retaliation and False Accusations: Protect Yourself

Image
To protect yourself from boss retaliation and false accusations, keep a dated written record, answer accusations with facts rather than anger, use your employer's complaint channels, and learn which laws cover you. Retaliation for protected activity, like reporting discrimination or a safety hazard, is illegal under federal law, and agency filing deadlines can be very short. This guide is for employees who sense that something changed after they spoke up, and for anyone suddenly facing an accusation they know is untrue. Key takeaways Retaliation is illegal when it follows protected activity, such as reporting discrimination or safety concerns. A dated, factual record is your strongest protection. Respond to false accusations in writing, with evidence, and without counterattacking. Use internal channels first when it's safe, but know the external deadlines. An employment attorney can advise on your specific situation. This article is general information, not legal a...
Read more

How Do I Log In and Sign In to Workday HCM

Image
To log in to Workday HCM, open your organization's own Workday URL (there's no single public login page), then sign in either with your Workday username and password or through your company's single sign-on. If you're locked out, use "Forgot password" for native logins, or your corporate password reset for SSO, and contact HR or IT if neither works. This guide is for employees and managers signing in for the first time, people who've just switched employers, and anyone stuck at the login screen. Most Workday access problems come down to the wrong URL, the wrong login method, or an account that needs an admin to reset it. Key takeaways Each employer has its own Workday tenant and URL. Get it from HR, IT or your onboarding email; don't guess. If your company uses SSO, your Workday password is your normal work password, and resets happen through your company, not Workday. The mobile app asks for your organization's details first, then signs y...
Read more