How do I control privacy and authorization before sharing medical records?
Before sharing, name the recipient, purpose, exact file scope, access period, download or forwarding permission, and revocation path.
Uploading records is not the same as authorizing external sharing. Whether you use email, a portal, or MedDossier, keep upload, review, and sharing authorization as separate steps.
Authorization checklist
Identify the recipient by role and organization, not only by first name or chat handle.
Write the purpose: appointment intake, remote review preparation, insurance claim, visa exam, or family coordination.
List the files or categories included and exclude unrelated records by default.
Set access duration and whether download, forwarding, or family access is allowed.
Keep a record of when access was granted, narrowed, revoked, or resent.
Sharing control fields
Named person, team, institution, insurer, or authorized family member.
Why the records are being shared and what the recipient may use them for.
Specific files, date range, document categories, and excluded items.
Expiry, download, forwarding, revocation, and audit trail where available.
Common mistakes
- Treating upload as permission to send records externally.
- Using a public link with no expiry for sensitive files.
- Forwarding records to a family group without patient authorization.
- Sharing a full archive when the recipient only needs a specific episode.
Boundary
This page is not legal or medical advice. Privacy duties and authorization rules depend on the jurisdiction, recipient, and sharing purpose.
FAQ
Is a verbal okay enough?
For sensitive records, keep a written authorization or recorded request whenever practical, including recipient, purpose, and scope.
Can I revoke a shared packet?
That depends on the channel. A controlled link may support expiry or revocation, but downloaded or forwarded copies may be outside your control.
Should I share less first?
Usually yes. Start with the records needed for the stated purpose, then add more if the recipient requests them.
Related questions
External sources
Last updated: 2026-07-07