top of page
Search

Medical Records Are Not Personal Health Records: Managing Increasing Requests to Rewrite Clinical Records

  • 20 hours ago
  • 3 min read
The EHR is not a personal health record, it is a professional record containing personal data
The EHR is not a personal health record, it is a professional record containing personal data

We have noticed a big increase in requests to amend, remove or add information to clinical records since the expansion of patient access to online medical records, and while some requests relate to genuine inaccuracies and should be corrected, others are not appropriate and can be tricky to manage for customers.


Practices report patients asking for large sections of narrative to be added to records, historical consultations to be rewritten or clinical opinions to be removed, and sometimes even assessments to be replaced with alternative interpretations of events.


For us, this raises an important question around where the Right to Rectification ends and the obligations around accuracy begins.


The Right to Rectification Is Not a Right to Rewrite History

Article 16 UK GDPR provides individuals with the right to have inaccurate personal data corrected but the ICO has consistently distinguished between:


  • Factually inaccurate information.

  • Professional opinions and clinical judgements.


This means that a patient may disagree with a diagnosis, assessment, interpretation of symptoms, or a clinician's understanding of events, but that disagreement alone does not make the record inaccurate.


The purpose of rectification is to correct inaccurate data, not to retrospectively rewrite an accurate clinical history.


Medical Records Are Clinical Documents

Medical records are not personal health diaries or even a personal health record.


They are professional clinical tools, maintained to support safe and effective care.

Our customers rely on these records to understand previous presentations, risks, investigations, diagnoses and treatment decisions; making the integrity of the record critical.

If every disagreement resulted in historical entries being rewritten, the record would cease to function as a reliable account of clinical care.


What Should Practices Do?

Where a patient disputes a clinical opinion or interpretation:


  1. Review the concern carefully.

  2. Consider whether any factual inaccuracies exist (checking if there is more than one entry of this type, on different dates, for example)

  3. Correct demonstrably inaccurate facts.

  4. Update coding to "past problem" where clinically appropriate.

  5. Record the patient's disagreement where appropriate.

  6. Preserve the original clinical entry unless there is evidence that it is inaccurate.


In many cases, adding a note that the patient disputes an entry is a more appropriate response than altering the original record.


Managing Persistent Requests

Another pattern we see is that practices are sometimes then receiving repeated correspondence from patients seeking further amendments after a request has already been reviewed.

Once a request has been properly considered and a reasoned response provided, practices are not obliged to continually revisit the same issues in the absence of new evidence.

A clear written response explaining the outcome, the rationale, and the escalation routes available can often help bring the matter to a close.


Conclusion

We recognise that patient access to records is a really important part of transparency and patient empowerment, but transparency does not change the purpose of the clinical record.


The medical record exists to support patient care, not to serve as a collaboratively edited account of events. Our customers should be willing to correct inaccuracies, but equally confident in maintaining the integrity of records where no evidence of inaccuracy exists.


💡 Need some templates to help you respond to a request? Customers can find this on the myKafico platform!





Emma Cooper, Primary Care GDPR Nerd
Emma Cooper, Primary Care GDPR Nerd




 
 
 

Comments


00011-2939233035.png

DID YOU FIND THIS USEFUL?

Join our mailing list to get practical insights on ISO 27001, AI, and data protection; No fluff, just useful stuff.

You can unsubscribe at any time. You are welcome to read our Privacy Policy

bottom of page