Short Answer

Yes, a healthcare provider may generally confirm that it has your patient chart when a valid signed authorization permits disclosure to the person asking. However, even confirming that you were treated can reveal protected health information, so the provider may first verify the authorization, the requester’s identity, and the scope of permission. Confirmation alone is not the same as releasing the medical records.

Why Confirming Treatment Is Still a Disclosure

A statement that a person has a chart, received care, or was seen on a particular date can reveal health information. A healthcare provider should not give that information to an unrelated caller merely because the caller knows the patient’s name or date of birth.

The analysis changes when the patient has signed an authorization allowing a law firm or another named recipient to obtain information. North Carolina law generally protects confidential medical information and recognizes disclosure based on patient authorization. N.C. Gen. Stat. § 8-53 provides that confidential information in medical records is furnished with the patient’s authorization, subject to other lawful grounds for disclosure.

The provider may review the authorization before confirming anything. It may also ask the requester to use a records portal, send the request to a records vendor, provide identifying information, or submit the authorization by a designated method.

What a Signed Authorization Should Cover

A signature by itself may not be enough. The authorization should clearly show what the patient has permitted. Providers commonly check whether it includes:

• The patient’s full name and enough information to identify the correct chart.
• The healthcare provider or facility permitted to disclose information.
• The law firm, person, or organization permitted to receive it.
• A description of the records or information covered by the request.
• The relevant treatment dates or another clear time period.
• The purpose of the disclosure, when required.
• An expiration date or expiration event.
• The patient’s signature and the date signed.

An authorization may also address the patient’s right to revoke permission and the possibility that information disclosed to a recipient may no longer receive the same privacy protection. Certain categories of information can be subject to additional federal or state requirements. A provider may therefore release some records while asking for further permission before releasing others.

If a law firm is requesting records for an injury claim, the request should identify the records actually needed. Depending on the claim, that may include office notes, diagnostic reports, discharge summaries, billing records, and records for a defined period. A broad request for an “entire chart” may take longer to process and may capture unrelated information.

Confirmation Is Not Proof of What the Records Contain

A provider’s statement that it found a patient chart is an administrative confirmation. It does not establish:

• Which dates the patient received treatment.
• Whether the treatment concerned the accident or injury at issue.
• Whether the chart contains every expected report or bill.
• Whether records are stored under another facility, department, or billing entity.
• Whether the provider has approved the full request for release.

Once the records arrive, they should be checked against known appointments, bills, patient portal entries, and discharge papers. Hospitals, physician groups, imaging departments, ambulance services, and outside billing companies may maintain separate files. One response may not include everything needed for a North Carolina personal injury claim.

How This Applies to the Records Request

Here, a law firm employee contacted the healthcare provider using a signed authorization. The provider confirmed that the client had a chart and explained how to submit the records request. If the authorization validly identified the client, the provider, the receiving law firm, and the permitted information, that limited confirmation would generally be consistent with processing an authorized request.

The provider’s instructions do not necessarily mean the records have been approved or released. The request may still need to go through a medical-records department or outside vendor. That office may review the form, confirm the requester’s contact information, assess permitted fees, or ask for a corrected authorization.

Without reviewing the authorization and the provider’s communication, no one can determine whether every privacy requirement was satisfied. The key distinction is that the provider was responding to a request supported by the patient’s written permission, rather than disclosing treatment information to an unverified caller.

What to Save and Check

To document the request and reduce avoidable delays, keep:

• The signed authorization and the date it was sent.
• The original records request and proof of delivery.
• The provider’s submission instructions or portal confirmation.
• The name of the facility and its records department or vendor.
• Any invoice, rejection notice, or request for a new form.
• A list of treatment dates and provider locations.
• The records and itemized bills received in response.

If the provider rejects the authorization, ask for the reason in writing. A missing date, unclear recipient, incorrect facility name, expired permission, or incomplete description of the requested information may be fixable with a corrected form. The patient should review any replacement authorization before signing it.

Medical-record requests can take time. Waiting for records or discussing the request with a provider does not automatically extend a lawsuit deadline. Records should therefore be requested early enough to identify missing material without assuming that the request pauses the underlying injury claim.

Protecting Information During the Request

A requester should use the provider’s secure submission method when available and avoid sending sensitive information to an unconfirmed email address. It is also helpful to confirm that the provider has the correct recipient address before records are transmitted.

If the provider calls to verify the request, the law firm may need to confirm its identity and representation without asking the provider to discuss information outside the authorization. The authorization should remain the guide for what may be disclosed and to whom.

When Wallace Pierce Law May Be Able to Help

Wallace Pierce Law may be able to help identify the providers connected to a Durham injury claim, prepare focused authorization forms, submit records and billing requests, and track responses. The firm can also compare the materials received with the client’s treatment history and follow up when dates, reports, or itemized bills appear to be missing.

Medical documentation can affect how an injury claim is evaluated, but obtaining a chart does not establish fault, causation, or damages by itself. Those issues depend on the complete facts, supporting evidence, and applicable North Carolina law.

Talk to a Personal Injury Attorney in Durham

If your question involves injuries, insurance, fault, medical documentation, settlement paperwork, or a possible deadline, speaking with a licensed North Carolina attorney can help clarify your options. Call 919-313-2737 to discuss what happened and what steps may make sense next.

Disclaimer: This article provides general information about North Carolina personal injury law based on the single question stated above. It is not legal advice and does not create an attorney-client relationship. It is not medical advice, tax advice, or insurance policy interpretation. Laws, procedures, and local practice can change and may vary by county. If there may be a deadline, act promptly and speak with a licensed North Carolina attorney.