Good for you, Nova!
I just had to go through all this HIPAA training. Obviously, your Dr's people hadn't yet gone through their REQUIRED HIPAA training module. (it's on computer). Or, they weren't paying attention. It IS a badly set up and written course that you can pass without knowing anything. And, that you can read carefully without understanding anything, either.
I'm glad you got what BELONGS TO YOU. But, if they'd had any suspicion of what it was to be used for, they wouldn't have given it to you. (supercilious hypocrites).
I was going to suggest that, if they refused you again, that you threaten to report them for violation of the HIPAA Act. or at least politely ask them if this is a violation of the HIPAA Act.That's what probably happened. Someone who actually read the statute told the "people" what kind of trouble they could get into for refusing you your legal rights.
All this privacy and Med Records stuff has been in general practice before, as was said by others. But now it's Federal, spelled out legally (if not clearly), and there are some really nasty penalties for violation.

P.S. RE HIPAA: What's really interesting is that, although they have to get your permission for your participation in experimental procedures, they don't HAVE to tell you ANYTHING ELSE about it. Even if you suffer a bad outcome. I'll bet the Drug Companies are behind that codocil, fears of proprietary infringement & all.