News & Knowledge Risk Management Guide: Medical Record Release of Protected Health Information Healthcare professionals have a legal and ethical duty to protect the privacy and security of their patients' protected health information (PHI). The release of patient information requires that everyone in the medical office know and understand that the confidentiality of PHI is protected by law. That each patient has certain rights regarding how their PHI is handled, and that circumstances may exist under which state and federal law regulates the release of patient information; some of which require patient authorization. This guidance covers the most common issues related to the release of PHI and provide general information. Curi recommends healthcare professionals review organizational policies or contact legal counsel for specific… Are you a Curi member? The full content of this resource is available only to Curi members. If you are a member but do not have an account, you can register for an account. If you are unable to register, or want to learn more about becoming a Curi member, contact us for more assistance. As of January 30, 2025, signing in to Curi.com will be easier and more secure. We have a new unified “Sign in” for all clients with multi-factor authentication (MFA). After entering your password, the same one you use now, you will also enter a code sent to your registered email account. Contact us with any questions. Sign In Curi’s risk mitigation resources and guidance are offered for educational and informational purposes only. This information is not medical or legal advice, does not replace independent professional judgment, does not constitute an endorsement of any kind, should not be deemed authoritative, and does not establish a standard of care in clinical settings or in courts of law. If you need legal advice, you should consult your independent/corporate counsel. We have found that using risk mitigation efforts can reduce malpractice risk; however, we do not make any guarantees that following these risk recommendations will prevent a complaint, claim, or suit from occurring, or mitigate the outcome(s) associated with any of them. READ NEXT March 12, 2025March 12, 2025Curi Advisory | Cybersecurity | Hospitals/Health Systems | Medical Records | Practice Management | Risk Management On-Demand Webinar: Proactive Risk Mitigation for Unplanned EMR Downtime This webinar discusses how cyberattacks impact organizational networks and, more specifically, electronic medical records. Curi Advisory’s Senior Risk Consultant Lisa Zaddack explores key risk mitigation strategies… Read more February 5, 2025February 12, 2025Hospitals/Health Systems | Practice Management | Risk Management | Senior Living | Well-Being Utah: Impaired Health Professionals There are a variety of circumstances and conditions that can cause a health professional to become impaired and compromise their ability to engage in patient care… Read more February 5, 2025February 12, 2025Hospitals/Health Systems | Practice Management | Risk Management | Senior Living | Well-Being North Carolina: Impaired Health Professionals There are a variety of circumstances and conditions that can cause a health professional to become impaired and compromise their ability to engage in patient care… Read more