New Hampshire Medical Records Privacy: Rules for Birth Centers Transferring Labor Summaries to Hospitals

Patient Record Ownership

In New Hampshire, a birth center typically owns the physical or electronic format of the chart, while the patient holds enforceable rights to the information about them. Treat the record as confidential health information that you steward on the patient’s behalf under HIPAA Compliance and State Medical Privacy Laws.

Ownership carries duties: maintain a complete maternal and newborn record, control access, and document every transfer, addendum, or correction. Your policies should make clear that records cannot be removed or altered outside approved procedures and that patients can access, copy, and request amendments.

What this means in practice

• Designate a custodian of records responsible for integrity, availability, and release decisions.
• Keep one longitudinal record per patient with prenatal, intrapartum, newborn, and postpartum components.
• Record a chain of custody for any hand-carried packets or electronic transfers to hospitals.
• Define your designated record set so it’s clear what is included when patients request access.

Access to Medical Records

Patients have the right to inspect or obtain copies of their records, including labor summaries, in paper or electronic form. Under HIPAA, you must act on requests within 30 days (with one allowable written 30‑day extension if needed); if information is not maintained on-site, act within 60 days. Charge only a reasonable, cost-based fee for labor, supplies, and postage.

Provide records in the format requested if readily producible (for example, a PDF or CCD). Verify identity, respect a patient’s request for confidential communications, and accommodate personal representatives or legal guardians consistent with State Medical Privacy Laws.

Patient Authorization vs. Right of Access

A patient does not need a Patient Authorization to access their own records. Authorizations are generally required when sending records to third parties for purposes outside treatment, payment, or health care operations.

Record Retention Period

Set a written retention schedule that satisfies Medical Record Retention Requirements under New Hampshire law, payer rules, and HIPAA documentation obligations. HIPAA requires you to retain compliance documentation for six years; state rules and payers typically drive how long you keep clinical records themselves.

As a risk-managed baseline, retain adult records for multiple years after the last encounter and retain minors’ records until after the child reaches the age of majority plus additional years. Keep transfer logs, metadata (sender, recipient, timestamp), and acknowledgments for the same period as the underlying record.

What to retain

• Prenatal history, labs (including ABO/Rh, antibody screen, GBS), allergies, medications, and risk assessments.
• Labor and delivery notes, vital signs, fetal heart assessments, medications (time/dose/route), and complications.
• Informed consent forms, Patient Authorization forms (when used), and refusal documentation.
• Newborn assessment, Apgar scores, prophylaxis, screenings, and postpartum instructions.
• All Record Transfer Protocols, including secure transmission method and receipt confirmation.

Transfer of Medical Records

When a laboring patient is transferred, you may share the labor summary and relevant records with the receiving hospital for treatment without Patient Authorization under HIPAA. Use standardized Record Transfer Protocols that prioritize speed, continuity of care, and privacy.

Step-by-step protocol

1. Pre-alert: Call report to the hospital with patient identifiers and clinical status; document the handoff.
2. Compile: Generate a concise labor summary plus key prenatal data, current medications, allergies, and recent labs.
3. Secure transmit: Send via Direct secure messaging, HIE, encrypted fax, or encrypted email; avoid unencrypted channels.
4. Verify: Obtain confirmation of receipt; log timestamp, recipient, and method.
5. Accompanying copy: If appropriate, send a sealed packet with EMS; record chain of custody.
6. Post-transfer: Upload the sent summary and receipt to the chart; update the problem list and care plan.

Critical data elements to include

• Maternal identifiers, EDD/gestational age, pregnancy risk factors, allergies, and current meds.
• Blood type/Rh, antibody screen, GBS status and antibiotics given, key lab/imaging results.
• Labor course (onset, membranes, augmentation), vitals, fetal status, analgesia/anesthesia, and complications.
• Newborn status if delivered prior to or during transfer, including Apgar scores and resuscitation.

Note: The “minimum necessary” standard does not apply to disclosures for treatment, but you should still focus on information relevant to safe, effective care.

Confidentiality of Medical Records

Protect confidential health information with layered administrative, physical, and technical safeguards. Train staff on HIPAA Compliance, role-based access, and privacy incident response; reinforce a culture where everyone verifies recipient identity before any disclosure.

Core safeguards

• Access controls: unique user IDs, strong authentication, and role-based permissions.
• Encryption: data at rest on devices and in transit over networks; disable auto-forwarding.
• Audit logs: monitor access, exports, and printing; investigate anomalies promptly.
• Business Associate Agreements: execute BAAs with vendors handling PHI (e.g., HIEs, e-fax, cloud services).
• Segmentation: sequester specially protected data (e.g., substance use disorder records, psychotherapy notes) to honor stricter State Medical Privacy Laws.

Disclosure of Medical Records

Disclosures without Patient Authorization are permitted for treatment, payment, and health care operations, and when required by law (for example, certain public health reporting). Disclosures for other purposes require a valid, written authorization that is specific, time-limited, and revocable.

Situations to plan for

• Treatment transfers: permitted without authorization; document the clinical basis and recipient.
• Public health and safety: report as required; disclose only what the law requires.
• Court orders/subpoenas: validate scope and necessity; consult counsel before release.
• Sensitive services: apply stricter rules (e.g., 42 CFR Part 2) and obtain consent when required.
• Accounting of disclosures: maintain records for non‑TPO disclosures as required.

Birth Record Completion and Distribution

Birth Certificate Reporting responsibilities follow the place of birth. If the baby is born at the birth center, the center completes and submits the certificate to the state registrar within the required filing window. If birth occurs at the hospital after transfer, the hospital completes the record. If birth occurs en route, coordinate with the receiving facility and local registrar to ensure correct jurisdiction and timely filing.

Operational checklist

• Collect and verify parent information, pregnancy dates, and clinical details needed for the certificate.
• Obtain required signatures and identifiers; ensure data matches the clinical record.
• Submit within the state deadline and document submission, corrections, and any supplementary reports.

Key takeaways

• Use clear Record Transfer Protocols to move timely, clinically relevant information during transfers.
• Honor patient rights of access while safeguarding confidential health information.
• Align retention and disclosure practices with HIPAA Compliance and New Hampshire State Medical Privacy Laws.
• Complete and submit birth records promptly, coordinating with hospitals when transfers occur.

FAQs.

What are the patient rights regarding birth center medical records?

Patients have the right to access, inspect, and obtain copies of their records; request amendments; ask for confidential communications; and request restrictions on certain disclosures. You must respond within HIPAA timelines, provide records in the requested readily producible format, and charge only reasonable, cost-based fees. Authorized personal representatives generally have the same rights.

How long must birth centers retain labor summaries?

Retain labor summaries as part of the clinical chart for at least the longer of your State Medical Privacy Laws and payer requirements. Maintain HIPAA-required compliance documentation for six years. As a conservative practice, keep adult records for multiple years after the last encounter and keep minors’ records until after the age of majority plus additional years. Include transfer logs and receipt confirmations in your retention policy.

What consent is required to transfer labor summaries to hospitals?

For treatment-related transfers, HIPAA permits sharing labor summaries with the receiving hospital without Patient Authorization. Obtain a written authorization when disclosure is for non‑treatment purposes or when stricter laws apply to sensitive information. Always verify recipient identity, use secure channels, and document the disclosure.

When must birth centers submit birth records to the state?

Submit the certificate of live birth promptly within New Hampshire’s filing window for Birth Certificate Reporting. If birth occurs at the hospital after transfer, the hospital files; if birth occurs at the birth center or en route, the birth center or attendant coordinates filing with the appropriate registrar. Document submission dates and retain proof in the record.