Button: Make a Payment Button: Newsletter Mailing List

Icon: Healthcare LawHands-On Experience

Providing legal advice

and services since 1977

Healthcare Newsletter

Should my billing company give patients their records?

Provided by:  Jennifer Kirschenbaum, Esq

September 19, 2017




I own a billing company and patients call me directly to make payments and also ask for their medical records.  Can I provide the patient their medical record?

Thanks in advance.


Based on the phrasing of the question I presume for our purposes you operate independently from your medical practice clients.  I will also presume you have a billing services agreement in place that is specific for the services you are rendering to your client – billing services – not custodian of the medical practice’s records.  Custodianship of medical records is the obligation of your client, the medical practice.  It is the medical practice that will have the affirmative obligation to respond to a patient request for release.  Pursuant to HIPAA, as a business associate your access to patient records/protected health information are to be limited to the “minimum necessary”.  Serving as delivery service is not what you have contracted for as your services, and doing so would seemingly open you to potential liability for stepping outside your authorized scope of services.  My advice – direct the patient to the medical practice for record production requests.

Looking for the KK Healthcare Exchange?  Click Here. 

Looking for HIPAA and compliance forms?  
Click here to visit our website.
Have a question or comment for Jennifer?
Contact Jennifer at or  at (516) 747-6700 x. 302.
Interested in having Jennifer speak at an event or
at a residency/fellowship program?
Contact Jennifer directly at (516) 747-6700 x. 302 or at
Click here to learn about
K&K's Prepaid Legal Audit/Investigation Defense Now!