A subpoena is a request for the production of documents or a request to appear in court. A subpoena may be issued by the clerk of court or by an attorney.
There are two general types of subpoenas, each of which should be handled with care:
Specific examples of subpoenas issued to medical providers include:
These recommendations address the subpoena for documents, which is the most common type of subpoena sent to a physician’s office. This type of subpoena is commonly used in civil cases for the production of medical records by mail or courier delivery; however, it can also be used to require a person to deliver the records to a deposition or court proceeding. The subpoena must include documentation that the patient (consumer) received notification that the records are being subpoenaed. There should be either a written authorization for the release of the medical records subpoenaed or a proof of service on the patient.
Confidentiality laws, such as the federal Health Insurance Portability and Accountability Act (HIPAA), protect patient health information against unlawful disclosure. Disclosure of medical information in violation of the law(s) can subject healthcare providers to penalties and civil damages (e.g., compensatory damages, punitive damages, and attorneys’ fees) for breach of confidentiality. Generally speaking, releasing medical information pursuant to a valid subpoena from a state court is a lawful disclosure and is not considered a breach of the confidentiality rules mentioned above; however, absent a court order, there must be evidence that the patient has been notified of the subpoena. Practices that implement risk management measures to ensure that proper procedures are followed when processing subpoena requests can minimize liability related to unlawful disclosure and breach of confidentiality.
The subpoena will likely set forth a deadline for producing the records. Most states set a minimum number of days that must be given to comply, such as 20 days after the subpoena was served. Furthermore, most states require that you not produce the records earlier than the due date stated on the subpoena. These rules allow the patient time to quash or limit the subpoena if he or she objects to production of the requested records.
If the subpoena does not provide evidence indicating the patient has been notified, you should request a written statement and documentation from the requestor that 1) the patient has been notified and has been afforded the opportunity to respond; or 2) that a qualified protective order has been sought. Alternatively, you can obtain a HIPAA-compliant authorization form directly from the patient, after notifying the patient of the subpoena, or seek a qualified protective order. Additional guidance regarding subpoenas as related to health information privacy is available from the U.S. Department of Health and Human Services.
Release of records under a subpoena must comply with HIPAA’s privacy regulations. In this context, that means producing only those documents that are responsive to the subpoena. The subpoena should be read carefully and only those records specifically requested in the subpoena should be released.
As important as the obligation to protect patient confidentiality is, so is the obligation to respond in a timely fashion to a properly issued subpoena and to provide the information requested. Failure to respond to a valid subpoena may result in one or more penalties, including monetary sanctions, civil damages, and court costs.
The rules governing subpoenas may vary depending on the type of information requested and if the subpoena was issued in a state or federal court. If a physician has any doubts about how to respond to a subpoena seeking the release of medical records, he or she should consult an attorney.
A subpoena seeking the release of general medical records is generally not sufficient authority to release genetic information, mental health, psychiatric and/or psychotherapy records, records of substance abuse treatment, or records that contain HIV/AIDS-related information. A court order may be necessary. If a physician receives a subpoena seeking the release of information in these categories, he or she should consult an attorney.
When federal and state laws differ on confidentiality, the strictest of them governs.
Subpoenas come in different formats and not all subpoenas will appear identical. If you have any question as to the validity of a subpoena, consult an attorney before releasing any medical records.
There are certain distinguishing characteristics that will be included in most subpoenas. They include:
Subpoenas are usually delivered by registered mail, although they may also be hand-delivered. Accepting the subpoena does not automatically mean that you have agreed to comply with it.
The following resources are available from the U.S. Department of Health and Human Services:
The following resources are available to NORCAL policyholders through MyACCOUNT or by contacting the NORCAL Risk Management team:
