Overview
When granting access to a patient’s chart, following HIPAA-compliant practices is essential. A small but crucial step—verifying the patient’s date of birth (DOB)—ensures that only the right individuals gain access to sensitive information.
Why DOB Verification is Required
Prevents unauthorized access: If an incorrect email is entered, someone else could gain access to private patient data.
Protects practitioners and the practice: Ensuring verification minimizes the risk of HIPAA violations.
Maintains security in the patient portal: The registered email controls access and password resets, so verifying the patient is critical.
When Verification is Required
Creating a new patient chart and granting access
Building a SOAP note within the office (a prompt will remind you to verify DOB)
Gathering information over the phone (best practice is to confirm DOB before proceeding)
How Patients Can Register Securely
Patients can create their accounts using:
✅ Google registration – Quick sign-up with a Google account
✅ SMS registration – An alternative for those who prefer not to use email
✅ Embedded portal & “Book Now” button – Patients can complete the process themselves
More convenient registration options are being developed to improve the experience while maintaining security.
Final Thoughts
All EHR systems require verification steps like these to protect patient data. By following this simple practice, you help ensure compliance while keeping patient information secure.
If you have any questions, feel free to reach out!
