38 CFR 1.469: Patient access and restrictions on use.

(a) Patient access not prohibited. Sections 1.460 through 1.499 of this part do not prohibit a facility from giving a patient access to his or her own records, including the opportunity to inspect and copy any records that VA maintains about the patient, subject to the provisions of the Privacy Act (5 U.S.C. 552a(d)(1)) and 38 CFR 1.577. If the patient is accompanied, giving access to the patient and the accompanying person will require a written consent by the patient which is provided in accordance with § 1.475 of this part.

(b) Restrictions on use of information. Information obtained by patient access to patient record is subject to the restriction on use of this information to initiate or substantiate any criminal charges against the patient or to conduct any criminal investigation of the patient as provided for under § 1.461(d)(1) of this part.