Patient Records, Informed Consent, Confidentiality, and HIPAA
This domain tests documentation, consent, and privacy duties in Oklahoma dental hygiene practice.
Recordkeeping
Patient records must be accurate, legible, timely, and complete: history, exam findings, diagnosis, treatment, consent, medications, radiographs, and referrals. Do not alter a record after the fact; add a dated correction. Oklahoma law and Board rules set retention and access requirements; retain records at least the required period, and longer for minors.
Informed consent
Obtain informed consent before treatment: explain diagnosis, proposed treatment, risks, benefits, alternatives, and consequences of refusal. Document who consented; for minors, the parent or legal guardian generally consents. Consent must be voluntary and not obtained under coercion.
Confidentiality and HIPAA
HIPAA permits disclosures for treatment, payment, and health care operations, and otherwise requires authorization unless a legal exception applies. Use the minimum necessary. Provide the Notice of Privacy Practices, honor patient access rights, and follow breach notification. Oklahoma law may impose additional confidentiality duties.
Worked example
An employer asks for a patient's entire chart. The office should release only what is authorized or legally required, not the full record by default. If the patient signed a specific authorization, follow its scope; if not, decline or seek valid authorization.
Traps
Do not discuss patients in public areas or on social media. Do not refuse a patient's own record request based on office policy. Do not confuse consent to treat with authorization to release records.