Patient Records, Confidentiality, Informed Consent, and Release of Information
Records as a professional obligation
Georgia optometrists must keep records that let another clinician continue care: chief complaint, history, examination findings including visual acuity and intraocular pressure where relevant, refraction and prescription data, diagnoses, treatment, medications, advice given, and follow-up plans. Entries must be contemporaneous, authenticated, and legible, and corrections should be dated and initialed rather than erased. Retention must satisfy the Board's rule and any longer federal or payer requirement; record questions on the exam usually test whether the record supports the decision, not merely whether it exists.
Confidentiality and its exceptions
Patient information is confidential. Disclosure without authorization is permitted for: treatment (referring doctor, covering colleague), payment, health-care operations, required public-health or legal reporting, response to a valid subpoena or court order, and Board investigation. HIPAA sets a federal floor; Georgia law and Board rules may impose additional limits, including heightened protection for certain categories such as HIV status and mental-health information. Disclosing to a spouse, employer, or family member without the patient's authorization is a common exam fact pattern - the fix is a signed release or documented patient direction.
Informed consent
Consent must be informed: diagnosis or suspected diagnosis, nature and purpose of the proposed test or treatment, material risks and benefits, reasonable alternatives including no treatment, and the consequences of declining. Document the conversation, not just a form. Special situations - dilation in a patient who must drive, contact lens wear with known hygiene risk, therapeutic steroids with pressure risk - call for documented discussion. Minors and patients lacking capacity require a parent or legally authorized representative, subject to Georgia consent statutes for older minors in defined circumstances.
Release of information
- Use a written authorization that identifies the patient, the records, the recipient, the purpose, and an expiration or event ending the authorization; the patient may revoke it in writing.
- The patient owns the information; the practice owns the physical or electronic record and must provide copies within the time required by law, for a reasonable, nondiscriminatory fee.
- Do not release the entire chart when a summary or a specific date range was requested.
- Never alter a record in response to a records request; amendments are made by addendum.
Worked example
An adult patient's mother calls for the chart. The patient is 34. Without a signed authorization or a legal representative designation, the practice must decline. Document the call and the reason for refusal. If the patient later authorizes release to the mother, record the authorization and release only the scope authorized.
Traps
- Treating HIPAA compliance as sufficient when the Board rule is stricter.
- Releasing records to a spouse or employer on verbal assurance.
- Backdating or "cleaning up" a record after a bad outcome.