ID Opto Juris study materials
ID Opto Juris study resources

ID Opto Juris: Patient Records, Confidentiality and Regulatory Compliance

ID Opto Juris · Work through your exam, one topic at a time.

All guide sections

Patient Records, Confidentiality and Regulatory Compliance

What this domain tests

Recordkeeping, patient access, confidentiality, and the operational compliance duties that attach to an Idaho optometric practice.

Record content and retention

  • Records must identify the patient, document the examination, diagnosis, treatment, prescriptions, and follow-up, and be legible, dated, and authenticated.
  • The Board's rule sets the retention period, measured from the last professional service; records for minors are typically retained longer. Records must survive practice closure: the licensee must arrange custody and tell patients how to obtain copies.
  • Altering a record after a complaint is a separate violation. Corrections must be dated and attributed.

Access and disclosure

  • Patients are entitled to copies of their records on request, subject to the rule's process and permitted fees.
  • Disclosure requires a valid authorization or a recognized exception such as a Board subpoena, court order, emergency, or other legal requirement. Verify the scope of any subpoena and release only what it covers.
  • HIPAA sets a federal floor; Idaho law and Board rules may add requirements, and the stricter standard controls.

Compliance operations

  • Controlled-substance prescribing brings DEA registration, Idaho prescription monitoring query and reporting duties, and secure storage obligations.
  • Infection control, equipment, and office standards are enforced through inspection.

Worked example

A subpoena in a custody case demands "all records." The correct response: confirm the subpoena's validity and scope, release only the records it identifies, log the disclosure, and withhold unrelated third-party information. Any patient authorization should be checked against the rule's content requirements before release.

Traps

  • Applying HIPAA's six-year documentation retention instead of the Board's clinical retention rule.
  • Assuming a subpoena overrides all confidentiality limits.
  • Discarding records at practice closure without a custody plan.