Patient health records at risk in sudden practice closures

30 Days' Notice Required for Medical Record Access After Practice Closure, Concept art for illustrative purpose, tags: health - Monok

In a scenario becoming alarmingly common, patients across Chicago are grappling with the fallout from the sudden closure of Forward Medical Office, a self-described cutting-edge healthcare provider.

The abrupt shutdown left individuals like Cathy Link, a Chicago resident, unable to access her electronic health records (EHRs) despite repeated attempts. This incident exposes significant flaws in how healthcare providers manage EHRs during closures and underscores the critical need for better communication, regulatory enforcement, and patient advocacy.

Electronic health records are essential for continuity of care, especially for patients undergoing long-term treatments. Without access to this vital information, patients are left in limbo, unable to provide new providers with the detailed medical history required for effective care.

This case highlights the broader challenges of EHR access, the responsibilities of healthcare providers, and the resources available to patients when practices shut down unexpectedly.

Key Takeaways

Sudden practice closures in Chicago have left patients struggling to access their electronic health records (EHRs), highlighting the need for better communication, regulatory enforcement, and patient advocacy.

  • Patients are often left without access to their EHRs after a practice closure, disrupting continuity of care and creating unnecessary stress.
  • Healthcare providers must adhere to state and federal regulations, including giving adequate notice and ensuring records are accessible after closure.
  • Advancements in health IT, such as interoperable systems, can streamline EHR management and ensure patients receive timely access to their records.

Problems with EHR access after closures

When Forward Medical Office announced its closure, it gave patients little more than a notification of canceled appointments and a vague promise of future instructions on accessing their records.

For patients like Cathy Link, the lack of clarity created immense anxiety. Without her records, she could not provide her new doctors with essential information about her medical history, medications, or treatments.

Under Illinois law, medical providers are required to give patients at least 30 days’ notice before closing. This notice must include instructions on how to access medical records. However, adherence to this rule often falls short. In Forward’s case, the promised instructions on accessing records were deferred until after December 13, leaving patients in a precarious position.

The absence of a standardized, enforceable protocol for handling EHRs during closures exacerbates the problem. Patients may encounter difficulties such as incomplete contact information, inaccessible systems, or a lack of responsiveness from providers. For those with urgent medical needs, these delays can lead to disrupted care and even potential health risks.

Forward’s closure reflects a broader issue: the healthcare industry’s inconsistent handling of patient records when businesses shut down. Whether due to financial insolvency, organizational restructuring, or other reasons, closures often leave patients scrambling to retrieve their data—an essential right protected under federal law.

HIPAA and the right to access records

The Health Insurance Portability and Accountability Act (HIPAA) is a cornerstone of patient rights in the United States. Among its many provisions, HIPAA’s Privacy Rule requires healthcare providers to ensure patients have timely access to their medical records upon request. Delays or non-compliance with these requirements can lead to legal penalties and harm patient trust.

Cathy Link’s experience underscores the importance of HIPAA’s Right of Access. Despite multiple attempts, she was unable to obtain her records, raising questions about Forward’s compliance with federal and state laws. Similar cases have resulted in significant consequences for providers.

For instance, Rio Hondo Community Mental Health Center was fined $100,000 by the Office for Civil Rights (OCR) for failing to provide a patient with her records in a timely manner. The patient had made repeated requests over seven months, but the provider failed to comply. The OCR’s investigation found that Rio Hondo had violated HIPAA’s regulations, setting a precedent for enforcing the Right of Access.

Melanie Fontes Rainer, Director of the OCR, has emphasized that patients should never face barriers to accessing their medical records. Timely access is not merely a bureaucratic requirement—it is a critical component of effective healthcare. Without their records, patients may experience delays in diagnosis, duplicative testing, and disruptions to treatment plans.

What patients can do to access medical records

For patients left in the lurch after a medical practice closure, there are steps they can take to regain control over their health information. Organizations such as the American Health Information Management Association (AHIMA) and federal agencies like the OCR offer guidance and resources for navigating these challenges.

Here are some practical steps for patients seeking to access their EHRs:

Review Notifications: Carefully examine any communication from the closing medical practice. Notifications should include instructions on accessing records, but if the information is unclear, patients should seek clarification immediately.

Check Online Platforms: Many providers post updates on their websites or social media channels. These platforms may include contact details for record custodians or information on how to submit a request.

Contact State Agencies: State health departments and attorney general offices often assist patients struggling to obtain their records. These agencies can act as intermediaries between patients and providers.

File a Complaint with OCR: If other efforts fail, patients can file a complaint with the OCR, which investigates HIPAA violations and enforces penalties for non-compliance. The complaint process can be initiated online and typically requires documentation of the patient’s efforts to obtain their records.

Patients should also consider maintaining copies of their medical records whenever possible. By requesting updates after each appointment or treatment, patients can create a personal archive, reducing their dependence on providers during emergencies or closures.

The role of healthcare providers and regulators

While patients must take proactive steps to protect their health information, the primary responsibility lies with healthcare providers. Clear communication, compliance with legal requirements, and robust data management practices are essential to ensuring patients retain access to their records, even during unforeseen closures.

Healthcare Providers: Providers must adhere to state and federal regulations, including giving adequate notice and ensuring records are accessible after closure. Innovative solutions, such as cloud-based record systems, can simplify the process. These systems allow patients to retrieve their data independently, reducing the burden on both providers and patients.

Providers should also establish contingency plans for record management in the event of a closure. Assigning a custodian to handle requests and providing detailed instructions to patients can prevent confusion and delays.

Regulatory Agencies: Stronger oversight is needed to ensure compliance with existing laws. Agencies like the OCR have made progress in holding providers accountable, as demonstrated by the penalties imposed on Rio Hondo. However, more proactive measures, such as regular audits and public awareness campaigns, could help prevent violations before they occur.

Technology and Innovation: Advancements in health IT present opportunities to streamline EHR management. Interoperable systems that allow records to be transferred between providers securely and efficiently are critical for continuity of care. Policymakers and industry leaders should prioritize the development and adoption of these technologies.

Educating Patients: Patients are often unaware of their rights under HIPAA or the resources available to them. Public health campaigns, educational workshops, and online tools can empower patients to take charge of their health information. Awareness is the first step toward advocacy and self-protection.

Ensuring patient access to EHRs

The closure has shed light on significant shortcomings in how healthcare providers handle electronic health records during closures. For all the patients, the inability to access critical health information disrupts continuity of care and creates unnecessary stress. This incident underscores the urgent need for systemic improvements, from stricter enforcement of HIPAA regulations to the adoption of innovative health IT solutions.

Healthcare providers must take a proactive approach to managing EHRs, ensuring that patients receive timely access to their records even in challenging circumstances. Clear communication, compliance with legal obligations, and investment in secure, user-friendly systems are essential to maintaining trust and upholding patient rights.

The lessons from this case are clear: patient access to electronic health records is not just a regulatory issue—it is a fundamental component of quality healthcare. Ensuring that patients can retrieve their information without barriers is essential for fostering trust, protecting health outcomes, and supporting seamless care transitions.

Scroll to Top