Under certain situations, release of medical records directly to the subject of the records may cause an adverse effect, negatively impacting the individual. If an adverse effect is likely to occur, do not release the medical records directly to the individual. When an adverse effect is likely, individuals must designate in writing a responsible person to act as a designated representative to receive his or her medical records.
medical evaluations and determinations (including Forms SSA-831 Disability Determination and Transmittal, SSA-833 Cessation of Continuance of Disability or Blindness Determination and Transmittal, SSA-834 Continuation Sheet for Disability Determination, and SSA-892 End Stage Renal Disease Medicare Determination, and the rationales and diagnoses contained therein); and
records about the health of the claimant that originated from contacts with other individuals that we use to adjudicate claims (e.g., records or information received from other individuals that substantiates epileptic seizures or certain mental impairments).
IMPORTANT: We will not, under any circumstances, release medical records or discuss their contents in response to a telephone request.
Employees should refer questions regarding whether a particular record is a medical record to the following places:
Field offices (FO) and Program Service Centers (PSC) should contact the Assistant Regional Commissioner.
Central Office components should contact the Office of Disability Programs (ODP).Office of Disability and International Operations employees should contact their Operations Analysis Staff.
A designated representative is a representative that an individual elects in writing to receive medical records on the individual’s behalf when an individual’s direct access to the medical records is likely to cause an adverse effect to the individual.
NOTE: A designated representative is not the same as an “appointed representative” or a “representative payee”, although it may be the same person if the individual so decides.
An adverse effect is a consequence likely to occur if granting direct access to an individual’s medical records is expected to cause:
A disruption of the doctor-patient relationship; An interference with the individual's medical treatment or management; or A negative effect on the individual in some other way.If an adverse effect is likely to occur, do not release the medical records directly to the individual. If an adverse effect is not likely, you may release the medical records directly to the individual.
EXAMPLE 1 - Adverse effect not likely
John Doe has diabetes. The medical record indicates that the prognosis is good with treatment involving medication, diet, and exercise. In this example, an adverse effect is not likely.
EXAMPLE 2 - Adverse effect likely
Jim Doe has a mental health disorder. The doctor notes some aggressive behavior tendencies in Mr. Doe’s record. Direct access to the doctor’s report may provoke Mr. Doe to threaten the doctor or other members of the doctor’s staff. In this example, an adverse effect is likely.
When it appears that an adverse effect is not likely to occur, release the records directly to the individual and document the claim to reflect the action taken.
When an adverse effect is likely, individuals must designate in writing a responsible person to act as a designated representative to receive his or her medical records. The designated representative should be someone who is capable of reviewing and explaining the contents of the medical records to the individual. The designated representative does not have discretionary authority to withhold any portion of the medical records.
FOs should review the medical records to determine the likelihood of an adverse effect. Use eView for electronic folders. If the FO is unable to make an adverse effect determination, send the case to ODP at ^ORDP ODP OMA Policy Request for a determination or via mail to:
Office of Disability Policy
Office of Medical Assistance
6401 Security Boulevard
7270 East High Rise
Baltimore, MD 21235
Send cases to the Regional Office’s Regional Medical Advisor when:
An adverse effect determination is unclear; orAn adverse effect appears likely and the individual to whom the record pertains has not named a designated representative.
A DDS disability examiner has authority to make adverse effect determinations. If a disability examiner is unable to make an adverse effect determination, he or she may consult with a DDS medical advisor.
When you cannot make an adverse effect determination or an adverse effect appears likely, and the individual to whom the record pertains has not named a designated representative to receive the medical records, send the case to ODP at ^ORDP ODP OMA Policy Request or via mail to:
Office of Disability Policy
Office of Medical Assistance
6401 Security Boulevard
7270 East High Rise
Baltimore, MD 21235
If an adverse effect is likely, the individual must designate a representative. Follow these steps when an individual must designate a representative:
IMPORTANT: Do not tell the individual that direct access to a medical record is likely to have an adverse effect on him or her.
If you receive questions about our policy of designating a representative to receive an individual’s medical records, explain that our regulations (20 CFR § 401.55) require individuals requesting access to medical records to name, in writing, a responsible person. This person must be willing to review the records; discuss the contents of the records with the individual; and release the medical records in their entirety directly to the individual.
If an individual does not designate a representative to receive his or her medical records, and an adverse effect is likely, explain our requirements as stated in this section. Because medical records often contain technical medical terms, encourage the individual to select a medical professional to serve as the designated representative. However, an individual may designate any responsible person who is capable of explaining the medical information to serve in this capacity, including a family member. The individual must provide their designation to us in writing.
IMPORTANT: The individual must provide us with a proper consent form, authorizing the disclosure of their information to a designated representative. The individual may provide us with a valid 3288.
An individual may be unable to find someone to act as a designated representative or may refuse to designate a representative. Offer to assist in finding someone willing to act as the designated representative. OCO employees should request the FO to assist the individual. In these instances, send a notice to the individual requesting they designate a representative to receive their medical records and provide them with local service agencies or public health service agencies that may act as a designated associate for the individual.
If an individual refuses to name a designated representative, follow the applicable procedure below.
Document the file to include the adverse effect determination, copies of all interviews and copies of letters received from and sent to the requester. ODP will review the file and advise the individual of his or her rights.
Refer access requests for cases at the hearing or Appeals Council level to the Office of Hearings Operations (OHO). Notify the requester that OHO will respond to the request. Follow these instructions for all cases when OHO has jurisdiction, including:
Cases that will be referred to OHO, but have not yet been sent; Cases in OHO's possession; and Cases OHO returned for further development.OHO may return a case to the FO asking that the FO provide access. In these instances, OHO will indicate what records the FO should provide to the requester.
Follow the same procedure used for cases below the hearing level.
The agency follows two procedures in granting access to medical records of a minor child:
First, under the Privacy Act of 1974 and the agency's privacy regulations at 20 C.F.R. § 401.40 and 401.55(c), a parent or legal guardian may request access to a minor's records, when acting on the minor's behalf. Requests for Privacy Act access should be directed to the manager of the SSA system of records in which the records are maintained or made in person at the minor's local Social Security office. However, under our regulations, a parent or legal guardian may not directly access the medical records of a minor child. A parent or legal guardian requesting access to medical records on behalf of a minor child must designate a physician or other health professional, excluding family members, to receive the records.
Second, SSA will provide direct access to a parent or legal guardian when SSA has determined that due process requires the release of the information. In these cases, we permit direct access to a minor child’s medical records only in Hearing and Appeals Council cases or at the Disability Hearing Unit (DHU) level, to protect the child’s right to due process. The agency handles these disclosures of and access to a minor child's medical records at these levels as part of the adjudication process (separate from processing as a Privacy Act access request).
In both Privacy Act access requests and due process access cases, the parent or legal guardian must be acting in the best interests of the child. When the parent or legal guardian may not be acting in the child's interests (e.g., if a minor objects to disclosure of his or her medical information to the parent or legal guardian), consult with OPD prior to disclosure.
If a parent or legal guardian requests access to the medical records of a minor child, take the following actions:
When processing Privacy Act access requests or cases below the ALJ Hearing and DHU levels: