What should a health information professional do if asked for medical records without proper authorization?

When a health information professional is asked to release medical records without proper authorization, the appropriate course of action is to consult with a supervisor. This is critical, as releasing medical records without proper authorization can violate patient confidentiality and regulatory requirements, such as those set forth by HIPAA (Health Insurance Portability and Accountability Act).

A supervisor is typically more experienced in handling such requests and can provide guidance on the correct procedure to follow. They will be able to evaluate the situation, determine if any exceptions apply, and decide on the next steps to ensure compliance with laws and regulations. Consulting a supervisor helps protect the organization and the patient's rights while ensuring that the professional acts within the boundaries of legal and ethical standards.

This approach underscores the importance of safeguarding patient information and adhering to established protocols before any action is taken regarding sensitive health data.