Records requests should be easy to start and hard to mishandle. A consistent script gives the caller a clear path without exposing information prematurely.
Verify the requestor
Use the practice’s approved identity and authorization steps. Ask what records are needed, the destination, and the preferred delivery method only after the requestor is appropriately verified.
Explain the process
State the form, authorization, processing, and delivery steps that the practice has approved. Avoid promising a completion time unless the practice has published one. Route disputes or unusual requests to the records owner.
Document the handoff
Record the request date, scope, destination, verification status, and owner. Use the designated records system instead of storing sensitive details in an unrelated scheduling note.
Confirm the next action
Tell the caller whether they need to submit a form, wait for a callback, or contact another office. Read back the approved contact path and keep the request open until the owner closes it.
Sources and verification notes
- HHS: Individuals' Right Under HIPAA: Supports explaining and routing access requests under approved procedures.
- American Dental Association: Patient Records: Supports accurate record administration in dental practices.
Sources support the specific guidance identified above. Policies, prices, and service scope can change; verify current details before relying on them.
Common questions
Can a caller receive records immediately by phone?
Phone staff should explain the approved request and identity-verification process rather than bypassing it.
What if the caller is requesting another person's records?
Pause and follow the practice's authorization and identity requirements before discussing or releasing anything.