Medical records can be requested by the patient, exchanged for treatment, produced under an authorization, obtained through litigation procedure, or disclosed under another legal rule. Those routes do not have identical scope, safeguards, or effects.

A medical authorization should be reviewed by its exact sender, recipient, records, purpose, expiration, redisclosure terms, and revocation language rather than treated as routine paperwork.

Identify the document before signing

  • Who prepared and sent it, who is asked to sign, and whether that person has authority for the patient, minor, estate, or other individual
  • Every provider, facility, health plan, pharmacy, employer, agency, database, or other person authorized to disclose information
  • Every recipient and whether information may be forwarded to adjusters, lawyers, vendors, reviewers, experts, courts, or other parties
  • The stated purpose, matter, claim, event, date range, record types, exclusions, expiration event or date, and revocation procedure
  • Warnings about conditioning, redisclosure, sensitive categories, electronic access, costs, copies, and the signed person’s right to retain a copy

Authorization and consent are different concepts

The U.S. Department of Health and Human Services explains the difference between consent and authorization under the HIPAA Privacy Rule. When an authorization is required, it is a detailed document permitting specified health information to be used or disclosed for identified purposes and recipients. A general willingness to cooperate is not a substitute for reviewing those elements.

A patient access request serves a different task

HHS also describes an individual’s right to inspect and receive copies of medical and billing records, subject to the rule’s scope and limited exceptions. A patient-directed access request can be used to obtain and review the file before deciding what should be produced through another process.

  • Request the designated record set or defined components needed for the review rather than relying only on a portal display
  • Preserve the request, delivery method, response date, format, fee, record index, and any withheld or unavailable material
  • Compare demographics, event history, prior conditions, diagnoses, amendments, referrals, imaging, therapy, billing, and later events
  • Use the provider’s amendment process for a disputed factual entry and preserve both the original and response
  • Produce records through the applicable legal process without altering source documents or omitting responsive material based on personal preference

North Carolina privilege is a separate issue

G.S. 8-53 addresses communications between health care providers and patients, including authorization for furnishing confidential medical-record information and circumstances in which a court may compel disclosure. HIPAA compliance, state privilege, discoverability, admissibility, relevance, and a protective order are separate questions; satisfying one does not automatically resolve the others.

Narrow the request to the actual dispute

  • Injury, body region, condition, prior history, treatment, billing, function, causation, prognosis, or other issue for which the information is sought
  • Reasonable date range and provider list supported by the issue, with a process for adding a newly identified source
  • Specific handling for psychotherapy, substance-use, genetic, reproductive, infectious-disease, minor, or other specially regulated information when applicable
  • Whether a limited authorization, patient collection, redaction request, confidentiality agreement, protective order, objection, motion, or court ruling is appropriate
  • A production log connecting what was requested, authorized, collected, reviewed, withheld, produced, supplemented, and challenged

Preserve the signed version and later use

Keep the exact signed authorization, instructions, attachments, delivery evidence, provider correspondence, production, recipient, date, and any revocation. A revocation may affect future disclosures but generally does not undo action already taken in reliance on a valid authorization. Case-specific advice should address the applicable document and procedure.

The related injury medical-record guide explains how to collect and reconcile clinical, therapy, billing, functional, causation, and payment evidence before deciding how it should be shared.

Rosensteel Fleishman Car Accident & Injury Lawyers provides information about medical-record issues in North Carolina personal-injury claims. The appropriate scope depends on the actual claims, defenses, records, and legal process.

Sources