Responding to requests for medical records and patient access