When responding to a records subpoena, how should confidential information be handled?

• A. Refuse to disclose any records beyond what is legally required.
• B. Disclose all records without verifying the identity of the requester.
• C. Provide records as required by law while protecting confidential information.
• D. Delay disclosure indefinitely.

Answer: (C)

When a records subpoena comes in, the goal is to honor the legal request while protecting patient confidentiality. The best approach is to provide records as required by law and to take steps that shield confidential or irrelevant information from disclosure.

This means carefully reviewing the subpoena to determine exactly what is being requested and who is authorized to receive it. Verify the requester’s identity and authority, ensure the subpoena is properly issued, and check for any protective orders or privileges that apply. If the records contain confidential information that is not necessary to satisfy the subpoena, redact those parts or separate them from what must be produced. Only release what the law requires, and do so through secure, appropriate channels. If there are questions about privilege or scope, seek guidance or an in-camera review as needed, and notify the patient when permissible by law.

Choosing to refuse beyond what is legally required or to disclose everything without verification would unnecessarily expose confidential information and could violate privacy laws. Delaying disclosure indefinitely also undermines the legal process and professional responsibilities. By balancing compliance with confidentiality, you meet the subpoena’s demands while upholding patient trust and legal obligations.