North Dakota Minor Medical Records Access Laws: What Parents and Teens Need to Know

Minor's Access to Own Medical Records

Under HIPAA, a parent or legal guardian is typically the minor’s personal representative and, as such, holds the right to access the child’s confidential health information. However, North Dakota law creates important exceptions where a minor may control access to their own medical records for particular services.

When minors control their own records

• Sexually transmitted disease (STD) and substance use disorder (SUD) care: Beginning at age 14, a minor may consent to examination, care, or treatment for STDs or SUD without parental permission (N.D.C.C. § 14-10-17). For these episodes of care, the minor generally directs record access.
• Pregnancy-related care: A minor may obtain pregnancy testing and limited prenatal services without parental consent, subject to specific limits and provider discretion (N.D.C.C. § 14-10-19). Records from those services are typically under the minor’s control.
• Emergency and sexual assault care: Providers may treat a minor in emergencies or provide forensic services to a sexual assault victim without parental consent (N.D.C.C. § 14-10-17.1). Resulting records are handled consistent with HIPAA and applicable state exceptions.
• Unaccompanied homeless minors: A minor age 14 or older who meets the statutory definition may consent to medical, dental, or behavioral health care (N.D.C.C. § 14-10-20), and control related records.
• Emancipated Minor Medical Records: In rare cases where a minor is legally recognized as having adult decision-making authority (for example, by marriage or court order), the minor acts as the “individual” under HIPAA and may directly access and manage their records.

Even when a minor controls access, psychotherapy notes are excluded from the right of access under HIPAA, and releases involving SUD information must satisfy Substance Use Disorder Confidentiality rules discussed below.

Parental Access to Minor's Medical Records

As a default, parents may access a minor’s medical records as personal representatives. North Dakota’s Parental Consent Exceptions shift this default when state law authorizes the minor to consent to care, or when disclosure would create safety risks.

When parents can be denied access

• Minor-consented services: If a minor validly consented to STD/SUD treatment (age 14+), certain pregnancy services, emergency care, or care as an unaccompanied homeless minor, the parent is generally not entitled to those records without the minor’s authorization.
• Risk of harm: A provider may deny or limit a parent’s access if, in professional judgment, disclosure is reasonably likely to endanger the minor or another person. This Minor Capacity Assessment and harm evaluation follows HIPAA’s “endangerment” standard and must be documented.
• Special record types: Psychotherapy notes are excluded from access rights; SUD records are strictly protected under federal Part 2 rules.
• Court orders or law: A protective order, custody order, or other law may restrict a parent’s access.

If access is denied based on endangerment, parents generally have a right to a review by an uninvolved licensed professional. Providers should explain, in plain terms, what can and cannot be shared.

Confidentiality of Substance Use Disorder Records

Substance Use Disorder Confidentiality for diagnosis, treatment, and referral is governed by 42 C.F.R. Part 2. These rules are stricter than HIPAA and apply to most SUD programs and many integrated providers.

Consent rules for minors

• Age 14 and older in North Dakota: Because state law allows a minor age 14+ to consent to SUD treatment, only the minor may authorize disclosures of those records. Parents cannot override the minor’s decision.
• Under age 14: Where parental consent to SUD treatment is required, any disclosure typically requires written consent from both the minor and the parent/guardian, subject to limited exceptions.

Key Part 2 protections and exceptions

• No re-disclosure: Recipients of Part 2 records may not re-disclose them unless permitted by Part 2 or with new consent.
• Emergencies and mandated reporting: Disclosures are allowed in a bona fide medical emergency, for mandated reports (e.g., child abuse/neglect), for audits/evaluations, or under a specific court order meeting Part 2 standards.
• Care coordination and operations: Recent federal updates allow broader uses and disclosures for treatment, payment, and health care operations when the minor gives a compliant, single consent covering those purposes.

Because Part 2 is highly technical, providers should use precise forms and carefully explain consent scope and revocation rights to teens and parents.

Retention Requirements for Minor Medical Records

Medical Record Retention Periods in North Dakota vary by setting and licensure.

Hospitals

• General rule: Retain records at least through the 10th anniversary of the date the patient was last treated.
• For minors: Do not destroy until on or after the patient’s 21st birthday or the 10th anniversary of last treatment—whichever is later.
• Litigation holds: Do not destroy records involved in litigation until the matter is finally resolved.

Physicians and other licensees under the Board of Medicine

• Minimum: Retain all medical records for at least seven years from the last date of service for each patient, unless a longer period is required by law or prudent risk management.
• Custodianship planning: As of 2024, licensees must designate a custodian to preserve records if the licensee dies, retires, or becomes incapacitated.

Deceased Minor Records Preservation follows the same retention clocks: a minor’s death does not shorten statutory retention periods. Providers may keep records longer when they have research, legal, or medical value.

Access to Records of Deceased Minors

HIPAA protects a decedent’s protected health information for 50 years after death. During that period, the personal representative of the estate (for example, an executor or court-appointed administrator) stands in the shoes of the deceased minor for record access decisions.

• Who may access: The personal representative may request and receive the decedent’s records relevant to their duties. Parents may access only if they are the personal representative or another law grants them authority.
• Limited disclosures to others: In some circumstances, a provider may share limited information with a family member involved in the decedent’s care, consistent with HIPAA and any applicable state law, but this is not a substitute for full access.
• Preservation: Retention timelines for hospitals and licensees continue to apply after death; providers should honor legal holds and organizational policies.

Legal Capacity and Consent Standards

North Dakota blends HIPAA’s personal-representative framework with state-specific consent statutes that define when a minor can consent—and thereby control related records.

North Dakota consent pathways for minors

• STD and SUD services: Age 14+ may consent without a parent (N.D.C.C. § 14-10-17).
• Pregnancy services: A minor may obtain pregnancy testing and limited prenatal care without a parent, subject to statutory limits and provider judgment (N.D.C.C. § 14-10-19). This does not authorize abortion and does not displace other applicable laws.
• Emergency and sexual assault care: Providers may treat without parental consent and must take reasonable steps to notify a parent (N.D.C.C. § 14-10-17.1).
• Unaccompanied homeless minors: Age 14+ may consent to medical, dental, or behavioral health care (N.D.C.C. § 14-10-20).
• Surrogate consent when a minor is unable to consent: North Dakota’s informed health care consent statute identifies a priority list of surrogates for minors unable to consent (e.g., parent, guardian), guiding who may authorize treatment.
• Emancipation and similar status: North Dakota has no general civil emancipation process, but in limited circumstances (e.g., marriage or a specific court order), a minor may gain adult decision-making authority, which affects control over Confidential Health Information.

Minor Capacity Assessment and professional judgment

• Capacity: For SUD under Part 2 and for HIPAA endangerment assessments, clinicians evaluate whether a minor can make a rational, informed choice about consent or disclosure.
• Balancing tests: Providers weigh the minor’s privacy interests, clinical risks, and family involvement to determine whether sharing with a parent is appropriate or should be limited.

Balancing Confidentiality and Parental Rights

For families, the goal is safe, effective care without undermining trust. For providers, the task is honoring parental rights while protecting teen privacy where North Dakota law and federal rules require it.

Practical steps

• Clarify at intake: Explain which services a teen may consent to independently and how those records are handled.
• Use tailored authorizations: For minor-consented services, obtain precise, time-limited authorizations that reflect the teen’s wishes.
• Protect sensitive data: Segment SUD and other sensitive records in the EHR and flag Medical Record Retention Periods and litigation holds.
• Communicate carefully: When denying or limiting parental access, cite the applicable legal ground and offer the required review process.
• Plan for transitions: As teens approach age 18—or attain an adult-like status—update portal settings and record-sharing preferences.

FAQs

Can minors independently access their medical records in North Dakota?

Generally, no. A parent or guardian is usually the personal representative with access rights. However, when a minor validly consents to specific services under North Dakota law—such as STD/SUD care at age 14+, certain pregnancy services, emergency care, or care as an unaccompanied homeless minor—the minor typically controls those records and may request copies or direct disclosures. Psychotherapy notes and SUD records have additional restrictions.

When can parents be denied access to a minor's medical records?

Parents can be denied access when records relate to services the minor lawfully consented to on their own (e.g., STD/SUD care at age 14+, certain pregnancy services), when providing access is reasonably likely to endanger the minor or another person (based on professional judgment), when records are psychotherapy notes, when federal Part 2 rules restrict SUD disclosures, or when a court order or other law limits access.

How long must medical providers retain minor medical records?

Hospitals must retain records at least until the 10th anniversary of last treatment; for minors, not before the 21st birthday or the 10th anniversary of last treatment—whichever is later. Physicians and other Board of Medicine licensees must keep records for at least seven years from the last date of service, and longer if required by law, litigation holds, or prudent policy.

What are the consent requirements for disclosing a minor’s substance use disorder records?

Under 42 C.F.R. Part 2, if a North Dakota minor age 14+ consented to SUD treatment, only the minor can authorize disclosures, including to parents. For minors under 14 where parental consent to treatment is required, disclosures typically need written consent from both the minor and the parent/guardian. Limited exceptions apply (e.g., medical emergencies, mandated reporting, specific court orders), and re-disclosure is prohibited unless Part 2 permits it. Recent federal updates also allow a single, compliant patient consent to cover certain treatment, payment, and health care operations uses.