Identity data
Full legal name, date of birth, and government ID references help match records and support identity proofing processes for secure electronic access.
Complete and accurate MyChart Details speed patient care coordination, reduce repeat calls, and create an auditable record of consent and access preferences required by HIPAA and provider policies.
Clear responsibilities and periodic verification by staff and the patient minimize errors and meet regulatory expectations.
Clinic administrators review and confirm patient-entered MyChart Details, manage portal settings, and maintain audit logs. They coordinate identity verification, set authentication rules, and ensure the portal's consent language aligns with HIPAA policy and institutional legal guidance.
Patients or designated proxies enter and update their personal information, provide signature or electronic consent, and select who may access or receive their health information through the portal. Accurate entries affect billing, appointment reminders, and how test results are routed.
Full legal name, date of birth, and government ID references help match records and support identity proofing processes for secure electronic access.
Primary phone, alternate phone, and email are recorded with consent choices for SMS, email, or portal messages to control delivery of notifications and results.
Payer name, policy number, and subscriber data are stored to route billing, check eligibility, and minimize claim denials due to mismatched information.
Designated proxies or caregivers are listed with scope and duration of access so staff can honor authorized requests without breaching privacy.
Signed electronic authorizations for data sharing, research, or telehealth are captured with timestamps and authentication method for compliance.
A tamper-evident log records who changed a field, when, and by which authentication method to support HIPAA and internal audits.
Respond within 30 days (45 CFR §164.524).
Retain for 6 years (45 CFR §164.530(j)).
Keep signed authorizations for the period required by state law.
Document and justify immediately when PHI disclosed for treatment or public health.
Maintain readily accessible logs per internal policy for at least two years.
Patient submits updated details through portal or registration.
Staff or automated checks confirm identity and required fields.
Authorized staff approve proxy or consent changes.
Changes propagate to EMR, billing, and messaging systems.
| Field | Configuration |
|---|---|
| Authentication Method | Email OTP, SMS code, or identity proofing |
| Notification Rules | Define which events trigger email or SMS alerts |
| Proxy Approval Flow | Require in-person or documented authorization for proxies |
| Audit Logging | Enable detailed logs with timestamps and user IDs |
Choose platforms that support audit trails, HIPAA-BAA, and common integrations such as Microsoft 365, Google Workspace, NetSuite, Salesforce, and Box.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Yes, limited | Yes, limited | Yes, limited | Yes, limited |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
John Butler deployed electronic consents for patient intake to reduce paperwork and speed scheduling.
Brian Fitzgibbons standardized digital signature workflows for client onboarding to reduce manual errors.