Requests for Patient Information

Q: What should you do if someone other than the patient, such as an outside agency, asks for a copy of a patient’s record?
A: If this is a routine, authorized request, follow the established procedures. If this is not a routine, authorized request, or if you are in doubt about the request, forward the request to your medical records department. Do not assume that it is okay because it sounds legitimate.

Q: What should you do if another organization asks for access to patient information in your computer system?
Forward the request to your medical records department. They will determine if this organization should have access or not.

Q: Should caregivers still report suspected cases of child abuse or other situations required by law?
A: Yes. State Laws must still be followed. A related new requirement of HIPAA is that we track and tighten up our processes related to these types of disclosures so that individuals can be given an accounting of where their information has gone outside our organization without an authorization by the individual.