Divorced Parents, a Subpoena, and a Request to Delete
Nadia S., RDH, works in a three-dentist group practice in Frederick. A 15-year-old patient, K.L., has been seen for two years. Her parents divorced four years ago, and the registration form signed by the mother lists only the mother as responsible party with 'no restrictions' on information sharing. The father, who claims joint legal custody under a court order the practice has never seen, emails requesting a complete copy of K.L.'s chart, including the hygienist's note from the last visit recording that K.L. disclosed restricting food and purging. One week later the practice receives a subpoena duces tecum in the parents' custody case demanding the entire record. The mother then calls Nadia and asks her to 'take out that note about the eating and the one about the bruise two years ago - it will be taken out of context' and adds that the practice closes in six months, so the records will be destroyed anyway.
1. How should the practice handle the father's emailed records request, and what should Nadia do with the sensitive note?
Read the worked answer
Start with authority, not with the form. Under HIPAA a parent is generally the minor's personal representative and may access the record, and a parent with joint legal custody ordinarily has that right. But the practice has only the mother's word on the registration form - 'no restrictions' is her statement, not a custody order. Before releasing anything: verify the father's identity, obtain the custody order, and confirm who may consent and who may access. If the order grants joint legal custody with no restriction on records, he is entitled to a copy. If it grants sole custody to the mother, the practice needs her authorization or a court order.
Practical safeguards. Respond in writing. Send records by a method that meets HIPAA's safeguard standard (encrypted portal or mail, not plain email unless the requester has agreed). Charge only permitted copying fees. Log the request, the verification, what was released, and to whom.
The sensitive note. Nadia should not redact it. It is part of the designated record set - a hygienist's clinical observation, not psychotherapy notes - and sensitivity alone is not a basis for withholding. The right move is to route the request to the dentist/privacy officer and, if K.L.'s disclosure affects her care, ensure the treating dentist has seen it. The mother may disagree with the note; she may not have it removed.
Nadia's role. She confirms the note's accuracy if asked, declines to decide the release question, and documents the mother's request without commenting on the parents' dispute in the chart.
2. Does the subpoena obligate the practice to produce the entire record? Set out the correct process.
Read the worked answer
A subpoena is not self-executing consent. HIPAA permits disclosure in judicial or administrative proceedings only with satisfactory assurances: a court order, or a subpoena accompanied by a qualified protective order, or a subpoena plus documented good-faith notice to the patient or her representative giving a reasonable time to object. Maryland's medical-records confidentiality statute adds its own requirements; in practice that means the practice does not produce records to a lawyer on the strength of the subpoena alone.
Process.
- Do not hand anything to the process server or email anything to counsel. Time-stamp the subpoena and route it to the dentist and the practice's attorney or malpractice carrier - not to the hygienist.
- Confirm the subpoena's scope and whether a protective order exists; if not, the attorney serves notice on both parents as representatives so they can object.
- Produce only what is ordered or authorized, in the format required, with a cover letter describing exactly what was produced and any item withheld with the basis.
- Keep a copy of the subpoena, the notice, and the production log.
Do not trim the record. Producing a curated chart - omitting the eating-disorder note to help the mother - is the fastest way to turn a records dispute into a Board complaint for falsification and an obstruction problem in the litigation. If something is genuinely outside the order, withhold it and say so in writing rather than silently deleting it.
3. The mother demands deletion, and the practice is closing in six months. What are Nadia's obligations?
Read the worked answer
Never alter or delete. Removing a prior note is falsification of a patient record, regardless of who asks or why the practice is closing. A late entry may be added describing a correction, but only with date, time, author, and the reason - and only if the original entry was actually wrong. 'It will be out of context' is not a clinical correction.
Give the mother the legitimate route. Explain the amendment process: she may submit a written request to amend, the practice must respond within the regulatory timeframe, and if the request is denied she may submit a statement of disagreement that is kept with the record and included in future disclosures. Document that the request was made and how it was answered - in a separate administrative log, not by rewriting the clinical chart.
Closure is not destruction. Records must be retained for the period Maryland requires after the last treatment, and closure does not shorten it. The practice must plan custody of records, notify patients how to obtain copies, and follow the applicable rules for public notice and for transferring records if the practice is sold. K.L. is a minor and the father has an active dispute; destroying records now would look like spoliation.
Nadia's line. She is not the record owner and cannot order retention or release. She should put her objection to deletion in writing to the dentist, copy nothing into the patient chart, and keep her own copy. If the practice actually destroys or alters a record she knows is under subpoena, she has a personal reporting decision to make to the Board.