Check out the frequently asked questions and videos on Privacy.

FAQs: Record Keeping—Confidentiality and Access

  • What should I do if a patient or someone else wants access to a record?

  • Who should have access to the records?

  • What steps should I take to ensure confidentiality?

  • Can the patient ask to have their record changed?

  • Help! I lost a patient record...what should I do? What are my professional obligations?

  • What if someone other than a patient or their representative wants access to a chart?

  • When is express consent needed for release of personal health information?

  • When can you rely on implied consent?

  • Are there any circumstances when you can release personal health information without consent?

  • Do I need written consent to disclose personal health information?

  • What if a patient asks me to not record certain information? (The concept of a lock box.)

  • What are the steps to take in the event of a privacy breach or lost file?

  • What to do with patient records when retiring, selling, or leaving a practice?

  • Who is the Health Information Custodian (HIC) in a group practice?

  • Can I store patient records in the cloud?

  • Can I use email to communicate with patients?

  • Do I need explicit consent to share information with a patient’s family doctor?

  • A PT employee accessed the wrong patient file but it was a one-off error. Do I as the clinic owner and the health information custodian (HIC) need to report the patient information breach?

  • Can I release patient records to police officers under the Missing Persons Act?