To release a patient’s records to another provider in Massachusetts, which steps are required?

• A. Obtain patient consent, provide records upon written request, and charge reasonable copying or transfer fees; ensure secure transmission.
• B. Release records automatically upon any request.
• C. Require a court order before release.
• D. Refuse records to protect privacy.

Answer: (A)

Protecting patient privacy while ensuring care continuity drives the process of releasing records. In Massachusetts, and under federal privacy rules, a provider can disclose records for treatment to another provider when there is a valid request or patient consent. The steps that fit this standard are: obtain the patient’s consent or rely on a written request from the patient, provide the records in response to that written request, charge reasonable copying or transfer fees, and ensure the transmission is secure. A clear written request or authorization helps confirm what records are being released and to whom, and the practice may charge fees that are reasonable and cost-based for copying or transferring the records. Security is essential, so use a secure transmission method—such as encrypted electronic transfer or a secure patient portal—to protect the information in transit.

Releasing records automatically without a request, requiring a court order, or refusing records to protect privacy would not align with standard patient-rights provisions and privacy protections that govern health information in this context.