Moving Patient Medical Records
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
For PHC Medical Staff who are custodians of physical / paper patient medical records stored in the current St. Paul’s Hospital or PHC space
WHAT YOU NEED TO DO: Arrange for secure transfer, retention, enduring access, or destruction of medical records under your custodianship.
- PHC will not arrange this on behalf of individual providers, unless the patients and their records are under the stewardship of PHC, such as those attached to a medical clinic.
- General guidance is below, with links to regulatory requirements for a variety of practice situations.
- Physicians are responsible to apply requirements and guidelines correctly, as they pertain to you.
- These reference links and guidelines from the BC College of Physicians and Surgeons (CPSBC), CMPA, and Doctors of BC. The BC College of Nurse Practitioners and Midwives may have additional specific guidelines.
STEP 1
Review, know and follow your regulatory and professional obligations and duties
Review and follow CMPA requirements here
Canadian Medical Protective Association (CMPA):
Review and follow BC Records & Privacy here
STEP 2
Move, store or destroy your files securely
MOVE: Active medical records you need to access
Review these guidelines for Protecting Medical Records Outside the Practice.
Always fully protect privacy and confidentiality.
- Arrange for secure transport & storage offsite: another location such as a community or home office.
- Limit records: only those absolute necessity for active continuing care
- Document the removal process: track every file removed with a log: record name, information taken, and date
- Protect privacy and security during transport between locations: Confidential folders in a locked/ secure non-descript container, and remain under your direct control at all times during transport.
- Never leave files in a car, or visible, or take other unnecessary risks to the information.
- Restrict Access: If kept at a private home office, store in a secure, locked filing cabinet or dedicated, secure room with restricted access so unauthorized family or visitors cannot view them.
- Provide written notice to patients: how to access their records (e.g. contact you). See section below on ‘Notifying Patients” for information and a template notice.
- Notify the College within 14 days of the records relocation, and others as needed. See section below on “Notifying the College” for details.
MOVE & STORE: Inactive records or accessed infrequently
- Arrange for secure transfer: a qualified off-site storage location. (Suggest: MedRecords, below.)
- Scanning documents (optional): Your qualified provider can scan the records as an option
- Provide written notice to patients. Your qualified provider/MedRecords will provide this service to you.
- Notify the College within 14 days of the records relocation, and others as needed. See section below on “Notifying the College” for details.
When a records storage company retains medical records, you remain the custodian of the records and are responsible for their privacy, protection and control, and ensuring patients have necessary information to access copies.
DESTROY: Records at the end of their retention period
- Confirm retention period requirements are met for BC
- DO NOT Shred in PHC / SPH shredding bins. You need proper documentation.
- Instead, arrange shredding from a qualified provider such as MedRecords
- You must obtain a required Certificate of Destruction.
- Retain the certificate and disposal log on file.
Note: You are legally responsible for the security of patient data until it is completely destroyed. If a data breach occurs or if you are audited, a Certificate of Destruction is your legal proof that you fulfilled your fiduciary duty to securely dispose of that information.
STEP 3
Notify your patients, College, and others about new records location
Notify Patients
Provide clear written notice to patients about the change, where their records are stored, and how to access them. *Subject to the limited exceptions in the Personal Information Protection Act (PIPA)* below
- For active records at a new private location: notify patients of how to access them. (e.g. contact you)
- For stored inactive records: MedRecords will contact patients on your behalf
* Limited exceptions and section 23(3) of (PIPA)You are not obligated to disclose personal information including medical records that are: Threat to safety or health; harm to the individual themselves; reveal another person’s identity; confidential commercial information; solicitor-client privilege; Investigative or legal proceedings.
Contact Doctors of BC for support or questions if needed in these circumstances.Doctors of BC 1-800-665-2262
Notify the College and others
Within 14 days: Notify the CPSBC about the new medical records location and how patients can access it.
- Location of the storage facility, or
- If stored in a private office: how to contact you for patient access to the records.
- If a patient requests their medical records, the College will connect you and the patient. They will not share your private address.
- Do NOT share a list the patient records you have moved with the College or others. They do not want a list. Nor should you transfer to anyone else to protect privacy.
Others: In addition to patients and CPSBC, you may need to notify others. Some are involved in of the care of patients.
MEDRECORDS IN BC (Suggested service)
MedRecords is a non-profit Vancouver-based organization recommend by Doctors of BC.
At a low-cost or partial reimbursement, it will:
– Store medical records
– Deliver storage boxes and arrange pick-up at the hospital
– Digitize records (optional)
– Securely shred expired records
– Notify patients on your behalf
Intake Form | MedRecords.ca
NOT YOUR RECORDS?
If there are other patient records in your office space that are not yours, , please contact PHC.
SUPPORTS FOR MEDICAL STAFF