HIPAA Training for Labor & Delivery Clerks: How to Fax Maternal-Fetal Medicine Consult Packets Safely

Protecting Patient Health Information

Your role in Labor & Delivery involves handling Protected Health Information (PHI) every day. Under the HIPAA Privacy Rule, you must use, disclose, and share only what is appropriate for patient care and operations, and always guard against unauthorized access or disclosure.

The HIPAA Security Rule complements this by requiring administrative, physical, and technical safeguards for electronic systems that store or route faxes (for example, multifunction devices or fax-to-email services). Treat each fax as a secure fax transmission that could expose PHI if misdirected, incomplete, or left unattended.

Maternal-fetal medicine (MFM) consult packets often include prenatal histories, ultrasound interpretations, labs, medication lists, and demographic data. Handle these packets deliberately: keep them face-down when not in use, avoid public areas, and confirm you are following your facility’s sanctioned workflow before sending.

Verifying Recipient Fax Numbers

Always confirm the destination number from two independent, approved sources (e.g., your EHR directory and the MFM clinic’s official contact list). If anything conflicts, call the receiving office to perform a read-back verification of the full fax number before sending.

When calling, identify yourself, confirm the clinic name, department, and the individual authorized to receive PHI. For new or rarely used numbers, send a non-PHI test page first that requests a call-back confirmation. Update your directory only after a successful verification, and document the verification step in your log.

Avoid using numbers written on sticky notes, screenshots, or patient-provided cards unless you independently verify them. Re-verify preprogrammed speed dials on a set schedule or whenever a number has not been used recently.

Utilizing Confidentiality Cover Sheets

Attach a cover sheet to every outbound fax containing PHI. Include a clear Confidentiality Notice that explains the information is intended only for the named recipient and provides instructions if received in error (immediate contact, secure destruction, and no further disclosure).

• Recipient: full name, department, organization, phone number, and verified fax number.
• Sender: your name, unit (L&D), callback number, date/time, and total page count (including the cover sheet).
• Patient identifiers: only the minimum needed (e.g., initials and medical record number), not full SSNs or sensitive details on the cover sheet.
• Purpose: “MFM consult packet” and a brief note if time-sensitive.

Do not place clinical content on the cover sheet. Keep the language concise and professional, and ensure the cover sheet prints first so it shields the packet beneath it.

Confirming Fax Transmission Success

After sending, review the device’s confirmation page to ensure an “OK/Success” status and the correct page count. File or upload the confirmation according to policy so it becomes part of your documentation trail.

For time-sensitive consults, call the recipient to confirm legibility and completeness. If the confirmation shows an error, stop and re-verify the number before resending. Never send repeated attempts to an unverified number. Document any failures, corrective actions, and the final outcome.

When applicable, attach the confirmation to the consult request in the EHR so the care team can see the status without hunting for paper receipts.

Securing Fax Machines

Place fax devices in staff-only areas and position output trays away from public view. Retrieve printouts immediately, and use secure bins for incoming faxes containing PHI so pages are not left exposed.

Follow device hygiene: log out of multifunction devices, clear temporary storage per policy, and wipe scanner glass after use. Disable auto-forwarding to unsecured email accounts. These steps align with the HIPAA Security Rule’s safeguards and reduce the risk of unauthorized disclosure.

Post quick-reference prompts near the device (without PHI) covering pickup, misdirected fax actions, and after-hours procedures. Report malfunctions promptly so staff do not bypass safeguards.

Limiting Faxed Information

Apply the Minimum Necessary Standard. For an MFM consult packet, include only what the specialist needs to make decisions now—typically the consult order/note, the most recent ultrasound report(s), pertinent labs, current medications, allergies, EDD, obstetric history highlights, and relevant problem lists.

Exclude full charts, duplicate pages, nonessential administrative forms, and highly sensitive data not needed for the consult. Redact nonrequired elements (e.g., full SSNs) and prefer identifiers like MRN with initials or DOB if policy allows.

If the clinician requests more information later, send an addendum rather than oversharing up front. Document what you included and why, referencing clinical necessity.

Logging Fax Transmissions

Maintain a complete log to support an Audit Trail. Record the date/time, sender, recipient and verified number, patient identifiers (per policy), page count, purpose, transmission result, and any follow-up actions. Keep logs in a secure location or approved system.

Audit logs periodically to spot patterns—failed numbers, after-hours risks, or frequent addenda—and escalate persistent issues for correction. Logging strengthens accountability and supports compliance reviews and incident investigations.

If a misdirected fax occurs, treat it as a privacy incident: immediately notify your supervisor or privacy office, request the unintended recipient to destroy the documents, document all actions, and follow your organization’s notification procedures.

By verifying numbers, using robust cover sheets, limiting content, securing devices, confirming results, and logging thoroughly, you create a reliable safeguard chain for secure fax transmission of MFM consult packets and maintain HIPAA compliance.

FAQs.

What are the key components of HIPAA training for faxing PHI?

Training should cover the HIPAA Privacy Rule and HIPAA Security Rule basics, identifying PHI, applying the Minimum Necessary Standard, verifying recipient numbers, using a proper Confidentiality Notice cover sheet, confirming transmission success, securing fax devices, and maintaining an Audit Trail through accurate logging and incident reporting.

How can labor and delivery clerks verify recipient fax numbers?

Use two independent, approved sources (EHR directory plus the clinic’s official contact list), then perform a phone read-back with the receiving office. For new numbers, send a non-PHI test page and obtain a call-back confirmation before transmitting PHI. Document the verification step in your fax log.

What are the consequences of improper faxing of consult packets?

Misdirected or unsecured faxes can expose PHI, triggering privacy incidents, corrective actions, and potential regulatory penalties. They may delay patient care, require notifications, and necessitate remediation plans. Thorough verification, secure fax transmission practices, and complete logging help prevent these outcomes.