What steps should a podiatrist take when a patient requests access to their medical records in Oklahoma?

• A. Deny access to protect privacy.
• B. Verify identity, respond within timelines, provide copies or allow inspection, protect third-party information, and document disclosure.
• C. Charge any fee and refuse
• D. Provide records after court order.

Answer: (B)

Access to a patient’s medical records is a protected right, balanced by privacy and security rules. The correct approach is to verify the requester’s identity to prevent improper disclosures, respond within the legally required timeline, and either provide copies or allow the patient to inspect the records. If the records contain information about another person or third parties, redact those portions to protect their privacy, and document the disclosure—noting what was released, to whom, and when. This process upholds patient rights while safeguarding others’ confidential information and maintains a clear record of what was shared. Denying access outright, refusing with no basis, or waiting for a court order as the standard method do not fit these privacy-protection and patient-rights requirements.