When and How to Disclose Requested Information

When and How to Disclose Requested Information

One constant in healthcare is people asking you for, or even demanding, information.

It could be a police officer insisting they get information about a patient. It could be a lawyer indicating that they have the right to medical records, employment files, or some business record. It might be a parent of a patient, going through a contentious divorce, insisting that they are entitled to medical information their spouse refuses to share.

These situations pose peril because there often is a wrong answer. There can be consequences if you share information with someone who is not entitled to it, but also for refusing to share information with a party who is. Because there are so many different applicable laws, this article is not going to try to tell you whether you can, must, or should disclose information. Instead, I want to focus on a framework for approaching the person making the demand. 

I have said this before, but the first thing to emphasize is that the louder someone is yelling at you, the less likely it is that they have actual authority to get whatever they are demanding. People with clear authority cite it. Whether it is a search warrant or a statutory provision, when people have a legal basis to get information, there is no need for theatrics. So, if someone is yelling, that should heighten your level of suspicion.

But the opposite can also be true. If someone is really sweet-talking you or offering a sob story, they too may lack the authority to get information. They may be hoping to con you into sharing something. I once came remarkably close to falling victim to such a ploy. I had represented a couple in a dispute about coverage of substance use disorder treatment. A few years later, the husband called asking for a copy of the legal file. What he really wanted were his estranged wife’s medical records. 

It can be particularly difficult to stand your ground when the person demanding information has a badge and a gun. I have some personal experience with this, because I had to talk my way into our house on the day our son died. It wasn’t easy. But in that situation, I was doing the asking. When an officer of the law is demanding something, refusing can seem very daunting. Members of law enforcement are used to getting what they want, and have been known to threaten arrest. My very first phone call as a lawyer was with a postal inspector.

When I explained that Minnesota law would not allow our client to provide him with medical records without a court order, his response was that if that was my position, I could spend the weekend in jail thinking about it. Since it was my second day on the job, I was only mostly sure that he was full of hot air. But in some ways, law enforcement is the easiest party with which to deal. If they have the legal basis for getting the information, they should be able to cite it with ease. 

And this brings me to my final point.

Just because someone gives you a citation doesn’t necessarily mean it’s valid. Anyone can string together a series of words and numbers to make it sound authoritative. It is important to remember that information, once released, cannot be retrieved. Record requests rarely involve situations where there isn’t the five minutes it takes to reach legal counsel to determine whether it is proper to release the information in question.

It is extraordinary unlikely that anyone will get arrested for doing so, though admittedly, it has happened. You may remember that I did a segment on the courageous Nurse Alex Wubbels from the University of Utah. What happened to her was terrible, but she wound up getting compensated for the government’s gross abuse of power. The bottom line is that standing your ground is the right thing to do, and if you face abuse for it, you may wind up getting compensated just for doing the right thing. 

When you aren’t sure whether to release records, it is time to channel Hall & Oates. Very politely ask the person, “wait for me please/wait for me, alright/I guess that’s more than I should ask/but won’t you wait for me?” Then use the time to check with counsel to make sure you are making the right decision. 

Facebook
Twitter
LinkedIn

David M. Glaser, Esq.

David M. Glaser is a shareholder in Fredrikson & Byron's Health Law Group. David assists clinics, hospitals, and other health care entities negotiate the maze of healthcare regulations, providing advice about risk management, reimbursement, and business planning issues. He has considerable experience in healthcare regulation and litigation, including compliance, criminal and civil fraud investigations, and reimbursement disputes. David's goal is to explain the government's enforcement position, and to analyze whether this position is supported by the law or represents government overreaching. David is a member of the RACmonitor editorial board and is a popular guest on Monitor Mondays.

Related Stories

Leave a Reply

Please log in to your account to comment on this article.

Featured Webcasts

One Chart, Five Truths: How CDI Prevents the Same Diagnosis from Becoming Five Different Outcomes

What happens when everyone reviews the same chart, but reaches a different conclusion? In this case-based clinical documentation integrity (CDI) webcast, Penny Jefferson examines how documentation involving clinical support, timing, causation, linkage, and terminology can produce very different outcomes for ICD-10 coding, reimbursement, quality, risk adjustment, medical necessity, denials, and compliance. Using cases involving postoperative respiratory failure, severe malnutrition, and encephalopathy, you’ll learn the practical CLEAR framework to help attendees learn to evaluate whether a diagnosis is codeable, consistent, specific, reportable, and ultimately defensible across the different teams and systems that rely on the medical record.

September 30, 2026

Mastering Spinal Fusion Coding for Inpatient Facilities: ICD-10-PCS Precision, Documentation, and MS-DRG Impact

Spinal fusion cases are among the most complex inpatient procedures to code, where even minor ICD-10-PCS errors can affect MS-DRG assignment, reimbursement, compliance, and audit outcomes. This practical webcast provides a step-by-step framework for interpreting operative reports, assigning accurate ICD-10-PCS codes, recognizing documentation gaps, and confidently coding complex fusion procedures. You’ll leave with practical tools that improve coding accuracy, reduce denials and audit risk, and strengthen documentation-driven reimbursement decisions.

July 29, 2026

AI, Audits, and the Future of the Revenue Cycle

Artificial intelligence is rapidly transforming healthcare revenue cycle operations, from coding and auditing to compliance and denials. Join industry leaders Pam Warren (MaineHealth) and Raemarie Jimenez (AAPC) for a live fireside chat exploring how AI is changing workflows, workforce roles, payer-provider dynamics, and compliance risk—and what organizations should be doing now to prepare.

Webcast Only Available On ICD10monitor Subscription – Subscribe Below

June 17, 2026

Trending News

Featured Webcasts

Radiation Oncology Fundamentals: Coding, Billing & Compliance for Hospital Outpatient & Professional Services

Join Michael Calahan, PA, MBA for this radiation oncology coding and compliance webcast as he explains the fundamentals of coding, billing, reporting, and documentation for hospital outpatient and professional services. Learn how the 2026 radiation therapy coding changes affect current practices, how to distinguish technical and professional services, and how to address bundling, units, frequency, modifiers, and documentation requirements. Michael will also help you identify radiation oncology coding and billing vulnerabilities that could lead to denials, overpayments, repayment demands, or federal audit exposure.

October 20, 2026

CMS Compliance & Audit Readiness Bundle

Get two essential perspectives on CMS compliance for $199.

The Two-Midnight Rule helps you navigate short-stay admissions, patient status, and evolving 2026-2027 requirements, while CMS CRUSH explores the next wave of program integrity, payment oversight, and data-driven scrutiny.

Two RACmonitor webcasts. One practical approach to preparing for increased CMS oversight.

September 20, 2026

Preparing for 2027: Inpatient & Outpatient Policy Changes for Case Management and Utilization Review

The 2027 CMS policy changes will impact case management, utilization review, reimbursement, and patient status decision-making long before they officially take effect. Join nationally recognized physician advisor Dr. Ronald Hirsch as he explains the finalized and proposed inpatient and outpatient rule changes, expanding bundled payment initiatives, payment updates, and evolving payer expectations. Gain practical guidance to help your organization prepare early, strengthen compliance, reduce reimbursement risk, and confidently navigate the transition to 2027.

September 17, 2026

Trending News

Prepare for the 2025 CMS IPPS Final Rule with ICD10monitor’s IPPSPalooza! Click HERE to learn more

Get 15% OFF on all educational webcasts at ICD10monitor with code JULYFOURTH24 until July 4, 2024—start learning today!

This Memorial Day, we honor those who gave all for our freedom. Take 20% off sitewide through May 29 with code MEMORIAL26 at checkout

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 1 with code CYBER25

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24