LEGAL HEALTH RECORD

The legal business record generated at or for a healthcare organization. This record would be released upon request.

The legal health record is the documentation of the healthcare services provided to an individual in any aspect of healthcare delivery by a healthcare provider organization. The legal heath record is individually identifiable data, in any medium, collected and directly used in and/or documenting health care or health status. The term includes records of care in any health-related setting used by healthcare professionals while providing patient care services, for reviewing patient data or documenting observations, actions, or instructions. Some types of documentation that comprise the legal health record (see examples listed below) may physically exist in separate and multiple paper-based or electronic/computer-based databases. Typically this includes records that are considered part of the active, overflow, and discharge chart.

The legal health records EXCLUDES health records that are NOT official business records of a healthcare provider organization (even though copies of the documentation of the healthcare services provided to an individual by a healthcare provider organization are provided to and shared with the individual). Thus, records such as Personal Health Records (PHRs) that are patient controlled, managed, and populated would not be part of the legal health record.

Copies of PHRs that are patient owned, managed, and populated by the individual but are provided to a healthcare provider organization(s) should be considered part of the legal health record. Such records are then used by healthcare provider organizations to provide patient care services, review patient data or document observations, actions or instructions. This includes patient owned, managed and populated "tracking" records, such as medication tracking records and glucose/insulin tracking records.

Examples of documentation found in the legal health record:

• Records of history and physical examination
• Multidisciplinary progress notes/documentation
• Immunization record
• Problem list
• Medication profile / Physician Orders and Renewals
• Consent for treatment forms
• Consultation reports
• Physical therapy, Speech therapy, and Occupational therapy records
• Email containing patient-provider or provider-provider communication
• Graphic records
• Intake/output records
• Nursing and other discipline assessment
• Care planMinimum data sets
• Practice guidelines or protocols/clinical pathways that imbed patient data
• Telephone orders
• Advanced Directives
• Discharge instructions, plan of care, etc.

PATIENT - IDENTIFIABLE SOURCE DATA

An adjunct component of the legal business record as defined by the organization. Often maintained in a separate location or database, these secondary records are provided the same level of confidentiality as the legal business record. The information is usually retrievable upon request.

Patient-identifiable source data are data from which interpretations, summaries, notes, etc. are derived. Source data should be accorded the same level of confidentiality as the legal health record. These data are increasingly captured in multimedia form. For example, the videotape recording of the encounter would not represent the legal health record but rather would be considered source data. In the absence of documentation, (e.g., interpretations, summarization, etc.), the source data should be considered part of the legal health record.

Examples of patient-identifiable source data:

• Diagnostic films and other diagnostic images from which interpretations are derived
• Electrocardiogram tracings from which interpretations are derived
• Audio of dictation
• Analog and digital patient photographs for identification purposes only
• Videos of procedure

ADMINISTRATIVE DATA

Provided the same level of confidentiality as the legal health record, however, the data is not considered part of the legal health record (such as in response to a subpoena for the "medical record.")

Administrative data are patient-identifiable data used for administrative, regulatory, and payment (financial) purposes

Examples of administrative data:
Authorization forms for release of information
Correspondence concerning requests for records
Event history/audit trails
Protocols/clinical pathways, practice guidelines and other knowledge sources that do not imbed patient data
Patient-identifiable claimPatient-identifiable data reviewed for quality assurance or utilization management
Death CertificatesPatient identifiers (e.g., medical record number, biometrics)

Provided the same level of confidentiality as the legal health record, however, the data is not considered part of the legal health record (such as in response to a subpoena for the "medical record."

Examples of derived data:

• Best practice guidelines created from aggregate patient dataAnonymous patient data for research purposes
• ORYX report
• OASIS report
• MDS report
• Survey/Accreditation reports
• Public health records
• Statistical reports