Examkin

Question

Difficulty: MediumConfidentiality and Privacy

A 42-year-old woman is evaluated in the outpatient clinic for follow-up of generalized anxiety disorder and insomnia. She has been a patient of this practice for three years. Her condition is currently well-controlled with cognitive behavioral therapy and occasional use of hydroxyzine. Two days later, the clinic receives a subpoena duces tecum signed by an attorney representing the patient's ex-husband. The subpoena demands the immediate production of the patient's complete medical records to be used as evidence in an ongoing, highly contested child custody dispute. The document is not accompanied by a court order signed by a judge, nor is there a signed authorization for the release of information from the patient. Which of the following is the most appropriate next step for the physician?

  1. Decline to release the records and notify the patient about the received subpoenaAnswer
  2. B
    Release the requested records because a subpoena is a legally binding mandate
  3. C
    Provide a succinct summary of the patient's diagnoses and medications in lieu of the full chart
  4. D
    Send the medical records directly to the presiding judge to ensure confidentiality
  5. E
    Contact the ex-husband's attorney to verbally clarify that the patient's condition does not impair her parenting

Answer

Decline to release the records and notify the patient about the received subpoena.
The correct response is to maintain patient confidentiality by declining to release the records and notifying the patient. In legal disputes, attorneys often issue subpoenas duces tecum to obtain evidence. However, under HIPAA regulations, a healthcare provider cannot disclose protected health information based solely on an attorney's subpoena. Disclosure requires either a court order (signed by a judge) or a HIPAA-compliant authorization signed by the patient. Notifying the patient allows her legal counsel the opportunity to object to the request.

Step-by-Step Solution

1
Analyze the nature of the request for medical records.
The request is a subpoena signed by an attorney, without a judge's signature and without the patient's authorization.
Determining the legal authority of a document is essential before releasing protected health information.
2
Evaluate the request against HIPAA privacy regulations.
HIPAA prohibits the disclosure of medical records based solely on an attorney-issued subpoena unless there are satisfactory assurances that the patient was notified and had a chance to object, or a qualified protective order is in place.
Physicians must strictly adhere to federal privacy laws protecting patient confidentiality.
3
Determine the appropriate physician action.
The physician must refuse to release the records and should inform the patient (or the patient's legal counsel) about the subpoena.
This allows the patient to exercise her legal right to file a motion to quash the subpoena and protects the physician from committing a HIPAA violation.

Key Concept

Under HIPAA, a physician cannot release a patient's medical records in response to a lawyer-issued subpoena absent a court order signed by a judge or explicit authorization from the patient.
Rate this question

Topics

Confidentiality and Privacy

More questions from this topic