USCIS Medical Exam (I-693) HIPAA Compliance Guide for Your Practice

Form I-693 Requirements and Overview

The USCIS medical exam (I-693) documents whether an applicant is free of inadmissible communicable diseases and has met vaccination requirements. Inside the United States, only a USCIS-designated civil surgeon may complete and sign the form.

Use the current Form I-693 edition and complete every field legibly. Ensure original signatures where required, include all laboratory and imaging results, and verify that each page contains the applicant’s identifying information.

Core compliance elements

• Verify identity with government-issued photo ID at every encounter related to the exam.
• Follow CDC Technical Instructions for all screenings, testing algorithms, and documentation.
• Attach supporting reports (e.g., IGRA result, chest radiograph report, syphilis test results, vaccination worksheet) to the packet.
• Provide the applicant a photocopy of the entire I-693 for personal records.

Common omissions to avoid

• Missing civil surgeon signature or date on required pages.
• Unchecked “contraindication” or “not medically appropriate” boxes when vaccines are deferred.
• Illegible entries or use of non-standard abbreviations for diagnoses and vaccines.

Conducting the Required Medical Examination

Begin with a comprehensive history, review of systems, and physical exam, including mental health and substance use screening. Order laboratory tests and imaging strictly per CDC guidance and document findings clearly.

Tuberculosis screening

For tuberculosis IGRA testing compliance, use an FDA-cleared IGRA unless a CDC-accepted exception applies. If IGRA is positive or symptoms/findings suggest TB, obtain a chest radiograph and manage per public health requirements before finalizing the I-693.

Sexually transmitted infection screening

Apply syphilis serologic screening standards using an accepted two-step algorithm (non-treponemal with treponemal confirmation or reverse sequence). Order gonorrhea testing by NAAT when indicated by current Technical Instructions and document treatment if positive.

Vaccination assessment

Evaluate immunization history against age-appropriate ACIP requirements. For vaccination record legal compliance, accept credible documentation, administer missing vaccines, or record valid medical contraindications or blanket waivers as applicable.

Additional clinical considerations

• Consider pregnancy testing when radiography is anticipated; defer X-ray per safety protocols if indicated.
• Document past treatment for TB, syphilis, or gonorrhea with physician-signed records, including medications and dates.
• Note mental health conditions that impact admissibility criteria and provide supporting documentation.

Ensuring HIPAA Compliance in Record Handling

Protect all I-693 data under HIPAA medical confidentiality requirements. Limit access to the minimum necessary, maintain role-based permissions, and authenticate users for EHR and imaging systems.

Secure data lifecycle

• Encrypt data at rest and in transit; use secure patient portals for providing copies on request.
• Execute Business Associate Agreements for vendors handling PHI (e.g., cloud EHR, scanning, destruction services).
• Maintain audit logs for creation, access, modification, and disclosure events.

Retention and disposal

Establish an immigration medical exam record retention policy that satisfies state medical record rules and professional risk tolerance. Retain HIPAA-required privacy documentation (e.g., policies, authorizations) for at least six years, and securely destroy paper or media when legally permitted.

Patient rights and disclosures

• Provide the applicant with a copy of the I-693 upon request; do not break the sealed packet prepared for USCIS.
• Disclose only the minimum necessary to third parties and document non-routine disclosures.
• Train staff annually on privacy, security, and the special handling of immigration exam materials.

Role and Responsibilities of Civil Surgeons

Your USCIS civil surgeon designation obligates you to follow current CDC Technical Instructions, maintain exam quality, and sign only after personally reviewing the complete record. You must ensure accurate identity checks and compliance with all testing and vaccination requirements.

Oversee collection and interpretation of labs and imaging, timely referrals to public health when required, and clear communication of findings to the applicant. Provide a copy of the packet for the applicant’s records and retain your practice copy per policy.

Quality assurance

• Use standardized checklists to prevent omissions and inconsistent entries.
• Reissue a corrected I-693 if errors are discovered; avoid cross-outs that can invalidate the form.
• Monitor turnaround times to meet applicant filing needs without compromising accuracy.

Handling and Submission of Form I-693

Complete the form in full, attach supporting reports, and sign where required. Confirm that applicant information appears on each page and that all vaccine decisions are clearly documented.

Form I-693 sealed envelope protocol

• Place the original I-693 and all attachments in an envelope addressed to USCIS.
• Seal the envelope; add “Do not open—USCIS use only” and sign/date across the seal.
• Give the sealed envelope to the applicant and provide a duplicate copy for personal records.

Submission pathways

• Applicants typically submit the sealed packet with their application, at an interview, or in response to a USCIS Request for Evidence.
• Do not email or e-file the I-693 unless USCIS provides explicit written instructions for a specific case.
• When mailing at USCIS request, use a trackable method and retain proof of delivery in the chart.

Managing Patient Confidentiality and Legal Obligations

Balance privacy with public health duties. Report conditions to local health authorities when required by law and document the disclosure basis, date, recipient, and content.

Only release PHI to attorneys, employers, or family members with a valid, HIPAA-compliant authorization from the applicant. For RFEs or other government requests, disclose only the materials specified and keep a record of what was sent.

Staff training and safeguards

• Reinforce “minimum necessary” and sealed-packet handling in onboarding and annual training.
• Secure physical storage (lockable cabinets, limited-access rooms) for any paper I-693 materials.
• Establish contingency plans for downtime, power loss, or disasters to protect exam records.

Applicant Preparation and Documentation Guidelines

Provide applicants a clear checklist before scheduling. This shortens cycle time, prevents repeat visits, and reduces the risk of RFE-causing errors.

What applicants should bring

• Government-issued photo ID (passport or equivalent).
• Vaccination records and any serologic titers to support vaccination record legal compliance.
• Prior treatment records for TB, syphilis, or gonorrhea, including dates and medications.
• Medication list, allergy list, and relevant mental health or substance use treatment summaries.
• Pregnancy documentation if applicable, and guardianship papers for minors.
• Payment method and interpreter information if needed.

Visit expectations

• Blood draw and urine sample may be required; fasting is typically not necessary unless your lab requires it.
• Chest radiograph may follow a positive TB screen or clinical concern.
• Most practices deliver the sealed packet within a few business days after all results return.

Conclusion

By aligning clinical workflows with CDC Technical Instructions, implementing robust HIPAA controls, and following a meticulous sealing and submission process, your team can complete the USCIS Medical Exam (I-693) accurately and on time. This protects patient confidentiality, minimizes RFEs, and supports a smooth immigration process.

FAQs.

What are the HIPAA requirements for handling USCIS medical exam records?

Treat I-693 materials as PHI: apply the minimum-necessary standard, restrict access by role, encrypt data, and maintain audit logs. Provide the applicant a copy on request, but preserve the integrity of the sealed USCIS packet. Retain privacy-related documentation for at least six years and dispose of records securely when permitted.

How should civil surgeons submit Form I-693 to USCIS?

Normally you do not submit it directly. Prepare the original I-693 and attachments in a sealed envelope and give it to the applicant to file with USCIS, at an interview, or in response to an RFE. Send records directly to USCIS only when explicitly instructed, using a trackable method and documenting the disclosure.

Who is authorized to perform the immigration medical exam?

Inside the United States, only a USCIS-designated civil surgeon may conduct and sign the I-693. Outside the United States, the exam is performed by a Department of State panel physician; those exams follow separate procedures.

What documentation must applicants provide during the exam?

Applicants should bring a government photo ID, vaccination records (and any titers), prior treatment records for TB and STIs, a current medication and allergy list, relevant mental health or pregnancy documentation, and payment method. Providing complete records helps prevent delays and RFEs.