The Records Request
A 15-year-old patient comes alone to a Kentucky dental office for a routine cleaning. She is tearful, has a healing bruise on her upper arm and a chipped incisor. She says her mother is out of town and asks the hygienist not to tell her parents she was seen because "they'll be angry." She also asks that the visit not be shared with her father, who is divorced from her mother. The hygienist notices that the patient's chart lists no legal guardian consent and no emergency contact. The dentist is seeing another patient and tells the hygienist to "just do the cleaning, it's preventive." Later, the father calls demanding a copy of the daughter's records and asking whether she was seen. The hygienist also sees a note that the patient is pregnant.
1. Can the hygienist provide the routine cleaning without parental consent?
Read the worked answer
A routine cleaning is elective, not an emergency. A 15-year-old generally cannot consent to dental treatment on her own in Kentucky, so the hygienist should not provide the cleaning without a parent or legal guardian's consent. The dentist's instruction to "just do it" does not cure the missing consent. If the patient had pain, swelling, or trauma, the office could provide emergency stabilization and then pursue consent. The hygienist should ask for the mother's contact information, verify custody, and document the refusal or inability to obtain consent. The patient's request for confidentiality should be respected as far as the law allows, but it does not override the consent requirement or mandatory reporting.
2. How should the office respond to the father's records request?
Read the worked answer
Verify the father's identity and his legal authority before releasing anything. Under HIPAA, a parent is generally the personal representative of a minor, but divorce decrees or custody orders can limit authority, and Kentucky law may allow minors to consent to certain sensitive services. The office should not confirm whether the daughter was seen until it verifies identity and authority. Ask for a written request and a copy of the custody order if there is a dispute. If the father has joint legal custody and no order limits access, he likely has a right to the record, but the privacy officer should review any sensitive information, such as pregnancy, and state-law exceptions. Do not release records to an attorney without a valid authorization or subpoena.
3. What mandatory reporting duties arise from the bruise and disclosure?
Read the worked answer
The bruise and the patient's statements create reasonable suspicion of child abuse or neglect. Kentucky law requires the hygienist to report promptly to the Cabinet for Health and Family Services or law enforcement; she should not investigate, confront the parents, or wait for the dentist's permission. The report should be factual: what was observed, what the patient said, and the date and time. Document the report and the reporter's name. The patient's request not to tell her parents does not override the mandatory reporting duty. Pregnancy at 15 is not automatically abuse, but it is relevant context and should be handled confidentially. The office should have a written protocol for these reports.