The Late Fax and the Duplicate Record
You are a registration specialist at a three-provider family practice. A fax arrives at 4:40 PM Friday from an urgent care clinic for a patient named 'Robert Chen, DOB 03/14/1978.' The fax requests records be sent back for a follow-up visit. When you search the EHR for Robert Chen, you find two active records: one with DOB 03/14/1978 and a second with DOB 03/14/1979, both with the same address and phone number but different MRNs. The 1979 record has a recent visit note from the urgent care clinic; the 1978 record has five years of lab results and medication history. The requesting clinic closes at 5:00 PM and the provider has asked that the records go out today.
1. What is the most appropriate first action, and why is sending the records immediately the wrong choice?
Read the worked answer
The first action should be to not send records until the identity of the patient and the correct record are confirmed. Sending records for the wrong patient is a privacy breach under HIPAA and could result in the wrong clinical information reaching the urgent care provider.
Reasoning steps:
- Two records with near-identical demographics strongly suggest a duplicate record created in error (common when a patient registers with a slightly different DOB).
- The 1979 record has the visit note that matches the fax request, so that is likely the record the urgent care clinic is referencing.
- However, the 1978 record contains the longitudinal history the provider may actually need.
- The correct sequence is: verify identity (call the patient or the requesting clinic to confirm DOB), then follow the practice's duplicate-record merge policy, then release records from the surviving record.
- The 5:00 PM deadline does not override patient safety and privacy obligations. A brief delay with a phone call to the requesting clinic explaining the verification step is appropriate.
2. The practice has no written duplicate-record merge policy. What should you do, and what are the risks of merging without one?
Read the worked answer
Without a written policy, you should escalate to the practice manager or Privacy Officer before merging. A merge is a destructive, often irreversible action that combines clinical data from two records.
Risks of merging without a policy:
- Data contamination: If the two records are actually different patients (e.g., twins or family members sharing an address), merging mixes their histories and medications.
- Audit trail loss: A merge may obscure which record the original entries came from, complicating later audits or legal requests.
- Inconsistent handling: Different staff may merge differently, creating further duplicates.
- Regulatory exposure: HIPAA requires reasonable safeguards; undocumented merges are hard to defend in a breach investigation.
Appropriate interim steps: document the discrepancy, flag both records, notify the manager, and request that a policy be drafted covering verification criteria, approval authority, and audit logging.
3. The urgent care clinic calls back at 4:55 PM and insists on receiving the records before close. Draft the key points you would communicate and state what you would release, if anything.
Read the worked answer
Key points to communicate:
- Acknowledge the request and confirm you have the fax.
- Explain that you have identified a possible duplicate record and are verifying patient identity before release, per privacy and safety policy.
- Offer to send the records first thing the next business day, or sooner if identity can be confirmed by phone now.
- If the clinic can confirm the patient's DOB and the visit date, you can proceed with the matching record.
What to release: Only records from the verified correct record. If identity is confirmed as the 1978 DOB, release from that record; if the 1979 record is confirmed, release from that record. Do not send a combined or partial mix. If identity cannot be confirmed before close, release nothing and document the call, the reason for delay, and the follow-up commitment. This protects the patient and the practice while maintaining good relations with the requesting clinic.