privacy
HIPAA and Shared Medical Records
<p>Is it against HIPAA regulations to not include records received from other clinics when a patient asks for a copy of their medical records to be sent to a new clinic? In other words, is it ok to only include the medical records for what occurred at our clinic?</p>

<p>I am hoping you found an answer elsewhere, since this post is old. </p>

<p>The short of your question is, it depends on the type of issue the medical records address (such as medical condition, behavioral health, or drug/alcohol treatment), what state you are in, what state the records are from, and how a Prohibition on Redisclosure may be understood. </p>

<p>My experience is from the behavioral health field, which has more limits about which records can be redisclosed. In Colorado, many behavioral health providers only release records that they created and encourage the patient to file separate releases for other providers if they have any "third party records" they would need. I know that in my practice, many of the records that my agency received came with a <a href="https://www.law.cornell.edu/cfr/text/42/2.32" rel="nofollow noreferrer">Prohibition on re-disclosure</a> attached, which also limited what could be re-disclosed.</p>

<p>Some resources:</p>

<ul>
<li><a href="https://www.reinhartlaw.com/knowledge/understanding-your-responsibilities-with-regard-to-the-redisclosure-of-patient-health-information/" rel="nofollow noreferrer">Reinhart Law</a> has a good description specific to HIPAA and the
state of Wisconsin's law.  </li>
<li><a href="http://bok.ahima.org/doc?oid=300263#.XmvDJS2ZMWo" rel="nofollow noreferrer">AHIMA's</a> health information management
resource is written in technical language but has a lot of good
information.</li>
</ul>
