Fixing a note, and who sees it

When the patient asks who else gets to see this record

A patient asks you to keep something off the chart. What to write, who to send it to, and what you never promise out loud.

8 min read built on 4 full opinions updated 2026-10-25

Written by a med-surg RN, ten years, day shift. Why there is no name on it · How this guide is made

Amber reacting to this topic
All sections

A patient asks you to keep something away from whoever reads the chart. Please don't bill my insurance for this, I'm paying cash. Or I don't want this in that shared network. Or my brother works here, can he see my chart? You probably can't grant that yourself. Don't try. You write down what was asked, pass it to the person who can act on it, and chart exactly what you told the patient.

Key points

  • Chart the request in plain words: what the patient wants kept from whom, and why, if they told you.
  • Send it to whoever handles restrictions at your facility (registration, the privacy officer, health information management) on the facility's own form. Chart the name, the time and how you reached them.
  • Write down what you told the patient. Include what you said you could not promise.
  • Keep your clinical documentation complete. The request is about who gets the record. What goes into it stays the same.
  • When someone answers, close the loop with a short follow-up note.

What to write

How it often gets charted How it reads better
Pt requests privacy.Pt asked that today's visit not be billed to her insurance; states she will pay out of pocket. Reason given: does not want spouse, who is policyholder, to see the claim.
Told pt insurance won't see this.Informed pt that I cannot approve billing restrictions myself and that registration handles these requests. Did not promise outcome.
Privacy concern addressed.Pt asked whether her records go into the regional data exchange and asked to opt out. Gave pt the Notice of Privacy Practices. Paged privacy officer J. Ruiz at 1420; message left with callback number.
Pt doesn't want family to see chart.Pt states her brother is employed in this hospital's lab and asked that he not be able to view her record. Notified charge RN M. Patel at 0915. Patel contacted registration re: confidential patient flag per policy.
Pt declined to discuss substance use for privacy reasons, not charted.Pt reports alcohol use, approx. 6 drinks/day x 2 yrs. Pt asked that this not be shared with employer. Explained employer does not have access to clinical record through this unit; referred specific concerns to privacy office.
Restriction done.1600: Registration (K. Owens) confirmed restriction request form completed and submitted for review. Pt informed request is pending, not yet approved.

Template

Chart note at the time of the request

[DATE] [TIME]
Pt requested that [WHAT INFORMATION, e.g. today's visit / HIV test result / mental health history] not be shared with [WHO, e.g. health insurer / employer / family member NAME / health information exchange].
Reason given by pt: [REASON IN PT'S OWN WORDS, OR "none given"].
Pt stated intent to [e.g. pay out of pocket in full / N/A].
Informed pt that I cannot approve or guarantee this request myself and that it is handled by [DEPARTMENT/ROLE].
Provided pt with [Notice of Privacy Practices / facility restriction request form / N/A].
Notified [NAME, ROLE] at [TIME] via [phone / page / secure message / in person].
No promises made regarding outcome. Pt verbalized understanding that request is pending.
Clinical documentation for this encounter completed as usual.
[YOUR NAME, CREDENTIALS]

Message to charge nurse or privacy office

To: [NAME, ROLE]
Re: Restriction request, [PATIENT NAME], MRN [MRN], [UNIT/ROOM]
Date/time: [DATE] [TIME]

Pt is requesting that [WHAT INFORMATION] not be shared with [WHO].
Pt states [REASON, OR "no reason given"].
Pt [has / has not] completed the facility restriction request form.
Pt [is / is not] planning to pay out of pocket for [SERVICE].
I told pt the request will be reviewed by your office and did not promise an outcome.
Pt is available [UNTIL DISCHARGE AT TIME / at callback number on file].
Please advise next steps.

[YOUR NAME, CREDENTIALS, EXTENSION]

Follow-up note once someone answers

[DATE] [TIME]
Follow-up on restriction request documented [ORIGINAL DATE] [ORIGINAL TIME].
Spoke with [NAME, ROLE]. Status: [submitted for review / approved / declined / referred to DEPARTMENT].
Details provided: [WHAT YOU WERE TOLD, e.g. confidential flag applied to account / billing hold placed / opt-out not available for this service].
Informed pt of status at [TIME]. Pt response: [PT'S RESPONSE IN BRIEF].
Pt given contact for further questions: [DEPARTMENT, PHONE].
[YOUR NAME, CREDENTIALS]

Words to avoid

Word or phrase Why it hurts Use instead
I'll make sure / guaranteedPromises an outcome that isn't yoursRequest forwarded to [NAME/ROLE]; outcome pending.
sealed / kept off the recordSounds like the clinical record was changed or hiddenRequest to restrict disclosure to [WHO] submitted.
privacy addressedSays nothing about what was asked or doneState the request, who you told, and what you told the patient
pt refused to share info (when they shared it and asked you to limit it)Confuses not telling with asking for a restrictionPt disclosed [X] and asked that it not be shared with [WHO].
per pt request, not documentedLeaves a hole in the clinical recordChart the clinical fact and chart the request next to it
done / taken care ofNobody can tell if it was granted, submitted, or just discussedsubmitted, pending, approved per [NAME], declined per [NAME]

A privacy promise and a thin note

Usually the mistake comes from kindness. The nurse wants to help, so she says don't worry, I'll make sure your insurance doesn't see this, or I'll keep that out of the notes. Then she drops the sensitive detail from her assessment, or writes it so vaguely it means nothing.

That's two problems.

First, you promised something that isn't yours to give. Restrictions on billing, on health information exchanges and on access flags (some facilities call them confidential patient or break-the-glass) go through registration, billing and the privacy office. Whether a request gets granted depends on rules and systems you don't control. When the promise falls through, the patient remembers your exact words. The chart has nothing about them.

Second, a thin note protects nobody. Down the line, a court, an insurer, a licensing board or the next clinician may read that record. They get what you wrote. Nothing more. Leave out the clinical facts and the record becomes an argument with no evidence. Write pt requested privacy and stop there, and nobody can tell what was asked, who was told, or what the patient was led to expect.

Bottom line

Chart the request, who you passed it to, and what you didn't promise. And keep the clinical note complete.

Official guidance

  • Patients can ask a provider or health plan to limit how their health information is used or shared. Asking doesn't mean it's automatically granted. So the request goes in the record either way. (HHS, HealthIT.gov)
  • Your facility's Notice of Privacy Practices explains how information is shared and how to ask for limits. Patients usually sign that they got it, so pointing the patient to it is a reasonable first step. (HHS, HealthIT.gov)
  • Your nursing record tells the rest of the team about the care, and it's also a legal document. The clinical content stays complete, whatever restrictions the patient asks for. (NSO, PMC/NIH)
  • Patients have the right to see their own records, and documentation systems should support that. Write every entry as if the patient will read it. (ANA, HealthIT.gov)

In court, 2007–2024

What happened in 4 court cases

Dunbar v. Kelly Services, Inc.: Tennessee Workers' Compensation Appeals Board, 2024. Years before her workers' comp claim, the employee had signed a hospital form requesting restriction of uses and disclosures of her health information. On it she wrote that she did not want her past history used against her comp injury and asked staff to "keep these records sealed." According to the opinion, her objections to admitting those records at the hearing were overruled. One record that mattered was a triage nurse's note from her ER visit: leg pain for three days, a knot on her foot, no injury noted. Here's the bedside lesson. The signed restriction request didn't make the record go away, and the triage nurse's plain factual entry is what people read later.

Maryland Attorney General Opinion (2007): Maryland Attorney General Reports, 2007. Maryland's Attorney General looked at whether patients can opt out of a statewide health information exchange under Maryland's medical records law. The conclusion: a patient could not get care from a participating provider while insisting that "the medical records related to that service be excluded from the HIE." The opinion also said patients should be told about the exchange before services begin. One state, one point in time. But it shows why you don't promise an opt-out at the bedside. What the system allows may not match what the patient expects.

Maryland Attorney General Opinion (2009): Maryland Attorney General Reports, 2009. This one dealt with prosecutors obtaining medical records. It notes that under Maryland law, documentation of a records request and of the disclosure itself "is to be included in the patient's record." Requests to share or withhold information leave a trail. That trail goes in the chart.

Stuckey v. Renaissance at Midway: Appellate Court of Illinois, 2016. A nursing home resident was assaulted by another resident, and it went to court. The trial court ordered the facility to produce redacted nurse's notes about the other resident's aggressive behavior. The appellate court reversed and held those records protected under Illinois's mental health confidentiality law. Whether the notes got shared was decided far above the unit. What the nurses wrote was exactly what both sides were fighting over.

Court decisions

Published decisions, linked to CourtListener.

All decisions behind this guide

From nurses online

Quoted as written. Opinion, not a source.

  • Lots of patients do this. ... Ooooo dope. My PCP doesn’t know about this history though because I needed anxiety meds and knew I wouldn’t get them if she knew my history. I don’t take those meds anymore so I’d be fine with her knowing I’d just feel like a fucker telling her I’ve been omitting this i

    r/nursing on Reddit: Do hospitals check you against their medical records when you apply t reddit

  • That person is a healthcare provider, and they are covered under HIPAA in a way your employer itself is not. That means they're also, separately, required to give you a copy of your medical records on request.

    r/nursing on Reddit: Does employer have the right to withhold PPD documentation? reddit

  • Ask to make yourself a confidential patient and have anyone who enters your chart be required to break the glass - you usually have to scan your badge and indicate why you're in the chart. ... This. Once discharged, you can go to records and ask for a print out of everyone who accessed your cha

    How do I prevent people from accessing my chart : r/nursing reddit

  • Nurses notes, doctors notes, orders, lab results, imagining, etc. so I mean. I don’t see why it would be an issue now days. Now that patients have SO much access to their own medical charts, I honestly believe HIPAA and all things surrounding ...

    r/nursing on Reddit: DO I SELF REPORT reddit

Other guides

Advice, not law.