Think twice before disclosing full patient records to insurance companies

Following a change to how some insurance companies are assessing patients’ medical history from GPs, the Medical Protection Society (MPS) is advising GP practices to ensure the patient has given valid consent before their information is disclosed.

MPS has recently heard from members that some insurance companies, when deciding insurance policies for individuals, are now asking GPs to disclose a patient’s full medical record for their own assessment rather than a general practitioner report (GPR) from the GP.

In both instances, patients sign a consent form authorising the insurance company to request the information. However, MPS is concerned that patients may be authorising full disclosure of medical records without realising the possible implications on their policy or insurance application – and this of course could lead to complaints against the GP and their practice.

Dr Stephanie Bown, MPS Director of Policy and Communications explains, 'It is understandable that insurers need medical information to assess the risks when offering insurance. However, requesting the patient’s full medical history has been throwing up some problems.

For example, an insurance company may come across something in a patient’s medical history, such as a short course of anti-depressants prescribed ten years previously, and treat this as a risk when considering whether to offer an insurance policy. The patient may have forgotten about this course of treatment and not realise that the insurance company has access to that information and could hold the GP responsible if this negatively affects their application.

GPs should ensure that the patient properly understands what they have authorised in order to avoid problems.

If a doctor is unsure whether their patient realises what they have agreed to, they should always check the patient’s understanding.'

MPS suggests the following checklist:

• Check what information you are being asked for (a GPR or disclosure of medical records)
• If there is any doubt in your mind as to the patient’s understanding of what they have authorised, ensure they are aware what the request entails
• Make sure you know who the information should go to. Has the patient requested it be sent to them or straight to the insurer?
• Ensure compliance with the Data Protection Act and redact any third party information from medical records

The article ‘Your Practice – published this week.

More information

For further comment please contact Gareth Cockman, Press Officer at MPS on +44 (0)207 399 1319 or email [email protected] for more information.

Notes to editors

1. MPS factsheet – Access to health records
2. MPS confidentiality factsheets series