Author: Andrea Miller
Reviewed By: Brindusa Vanta

Assisted living facilities can’t gain access to residents’ health records without consent in most cases. These communities conduct health assessments upon entry to determine whether they’re able to meet residents’ needs and provide appropriate care and support.

How to protect your private health records

Protecting your private health records prevents unauthorized access. Keep your protected medical information safe by using strong passwords for electronic devices storing sensitive data. Don’t share passwords with others and revise them regularly to improve security.

In addition, avoid storing your information online unless you use a Health Insurance Portability and Accountability Act (HIPAA)-compliant app or electronic health record. Never post identifying medical details on social media or a public online forum.

What are the rules about assisted living access to your health records?

HIPAA only lets assisted living facilities access your health records with your written permission. You need to sign a form allowing providers to share these documents with assisted living staff. 

On the other hand, HIPAA allows health care providers to request health records directly from other medical organizations for treatment and payment purposes. However, those providers aren’t under any obligation to comply with the request.

File a complaint with your assisted living facility or health care provider if they’ve violated the privacy of your medical records. The state attorney general’s offices, the Federal Trade Commission and the Department of Health and Human Services also handle HIPAA complaints.