Under HIPAA, patients have the right to access their medical records, request corrections, and know who has seen their health information. They can also choose who gets to see their data, giving them control over how their personal health details are shared.