PICA Insights

Releasing Patient Medical Records to Medicare, Medicare Advantage, and Insurance Companies

Mar 10, 2025 2:22:43 PM / by J. Kevin West

shutterstock_2474238105A doctor’s obligations regarding how to respond to medical records requests from Medicare, Medicare Advantage, and insurance companies can easily cause confusion. Receiving medical records requests is a frequent and common occurrence and it’s important to note that responding to these records requests does not require the doctor to acquire a medical records release form from the patient first.

HIPAA Rules for Releasing Medical Records
In fact, HIPAA allows medical records to be released without a patient release form in many different settings, including for patient treatment, billing, etc. Because HIPAA allows information sharing for billing purposes, any language on a CMS 1500 form is superseded by HIPAA guidelines – the CMS 1500 form does not prevent a release of records that is otherwise allowed by HIPAA. 

Regarding record requests from Medicare, Medicare Advantage, or commercial insurance plans, HIPAA also allows the doctor to provide medical records without a patient release form. HIPAA allows sharing of patient records for purposes of “health care operations,” which includes quality control, audits, licensure matters, etc. Additionally, most (if not all) provider agreements contractually require doctors to provide records to the insurer or to Medicare upon request and doing so does not require a patient release form.

Patient Medical Records Release Forms vs. Informed Consent Forms
Also keep in mind that a patient medical records release form is different from an informed consent form. A medical records release form pertains to the sharing of health information, while an informed consent form relates to the authorization of medical procedures or treatments after understanding the associated risks.

Comply with Medical Records Requests to Avoid Issues
A simple and reliable recommendation is that doctors comply with record requests from Medicare, Medicare Advantage, and commercial insurers, and remember that patient medical releases are not required to do so. Furthermore, refusing to comply with record requests is playing with fire – Medicare can revoke a doctor’s billing privileges for refusing to comply, and insurers can terminate the doctor’s provider agreement for failure to comply. It is never advisable for a provider to withhold or refuse to provide records in response to a request from a payer, whether governmental or private.

If you are not currently insured with PICA, take a moment to see how we protect our podiatrists. Fill out our online form to receive a free, no-obligation quote.


 

Disclaimer: The information contained on the PICA Blog does not establish a standard of care, nor does it constitute legal advice. The information is for general informational purposes only. We encourage all blog visitors to consult with their personal attorneys for legal advice, as specific legal requirements may vary from state to state. Links or references to organizations, websites, or other information is for reference use only and do not constitute the rendering of legal, financial, or other professional advice or recommendations. In the event any of the information presented conflicts with the terms and conditions of any policy of insurance offered by ProAssurance Insurance Company of America, the terms and conditions of the actual policy will apply. All information contained on the blog is subject to change.

Tags: Compliance

J. Kevin West

Written by J. Kevin West