How to Fax Medical Records

Yes, you can fax medical records. HIPAA permits healthcare providers to exchange patient information for treatment by fax, with reasonable and appropriate safeguards. HHS guidance on faxing patient information.

The practical work happens before and after transmission: establish that the disclosure is permitted, verify the recipient, prepare the correct documents and check the outcome. If the packet includes photographs, also consider whether fax will preserve the information the recipient needs.

With Fax.Plus, staff can send records through a web browser or mobile application without a physical fax machine. For PHI, use Fax.Plus Enterprise with Advanced Security Controls enabled and a signed Business Associate Agreement. Fax.Plus HIPAA requirements.

Here is how to prepare, send and follow up on a medical-records fax.

HIPAA rules for faxing medical records

Fax is a permitted communication method. Whether a particular disclosure is appropriate also depends on its purpose, recipient and handling.

HHS identifies recipient-number verification and protecting access to receiving equipment as examples of reasonable safeguards. These considerations remain relevant when a digital fax service sends documents to a physical machine.

Establish the purpose of the disclosure

HIPAA generally permits treatment disclosures without a separate patient authorization. Other requests may require authorization or another permitted basis. Certain records and applicable laws can impose additional conditions. Prescription packets also need the separate rules for faxing an authorized prescription.

Do not treat every records request as equivalent. A referral to a treating specialist, a request from an employer and a patient requesting their own records can require different handling. HHS Privacy Rule summary.

Apply the minimum necessary standard where required

HIPAA’s minimum necessary requirement does not apply to disclosures to, or requests by, healthcare providers for treatment.

Where the standard applies, follow the organization’s process for limiting the information appropriately. Avoid a blanket rule that requires stripping clinically relevant information from every treatment referral. HHS minimum necessary guidance.

Use the appropriate service and configuration

For Fax.Plus, faxing medical records containing PHI requires Enterprise, enabled Advanced Security Controls and a signed BAA. Basic, Premium and Business are not alternative HIPAA-eligible subscriptions.

The agreement is one component of the workflow. Staff access, recipient verification, document handling and organizational procedures still matter.

How to fax medical records securely

Confirm the recipient and requested records

Establish the receiving organization, intended department and fax number through the practice’s verification process.

A correct organization name does not establish the correct destination. Large facilities may have different numbers for referrals, medical records and individual specialties.

For an unfamiliar destination or a changed number, confirm the details through a trusted contact route. Do not rely solely on an unverified message containing new delivery instructions.

Then identify the requested documents, relevant dates and any required authorization or review.

Prepare the packet from the approved record source

Use the organization’s approved system to retrieve the records.

Check the patient identifiers on each document, including attachments originating from another facility. Remove documents belonging to a different patient and address any inconsistency before transmission.

Arrange the packet so the recipient can follow it. A referral might contain the referral letter first, followed by the relevant results and supporting records.

For paper documents, check both sides of each sheet. For electronic documents, inspect every page rather than assuming the file name accurately describes its contents.

Scan paper records or import existing documents

Fax.Plus supports attaching existing documents and capturing paper through its mobile application.

When scanning paper:

• Place the pages on a stable surface with readable lighting.
• Capture the entire page without cutting off identifiers or annotations.
• Review orientation and legibility.
• Check that no page is missing, duplicated or out of order.

The app’s capture workflow supports reviewing and adjusting scanned pages, including cropping and rotation. Inspect the final packet before sending. Fax.Plus document capture.

For existing files, retrieve them through an approved organizational workflow. Avoid introducing an unnecessary personal email, photo-backup or cloud-storage step simply to move a document onto the sending device.

Assess the protection of documents before upload, along with any copies retained outside the fax account.

Use the organization’s HIPAA-configured account

Sign in through the individual staff access approved for the task.

Before sending PHI, the organization should have completed the required Enterprise, ASC and BAA configuration. A newly created personal account or free allowance does not meet those requirements.

Staff should also know where incoming records arrive, who monitors them and who can access the receiving number.

These responsibilities deserve particular attention when several locations or teams share a service.

Add the appropriate cover information

Use a cover sheet when required by the organization’s policy or the receiving office’s process.

Useful information can include the sender, intended department, callback details and expected page count. Keep the cover appropriate to the purpose, rather than repeating sensitive clinical information unnecessarily.

A cover sheet is a practical safeguard. HIPAA does not universally require one for every fax, and it cannot correct a mistyped destination or make an otherwise impermissible disclosure acceptable.

Review the destination and send

In Fax.Plus, enter the receiving fax number, attach the prepared documents and complete the sending workflow.

Before selecting Send, compare the entered destination against the verified number and inspect the attached packet. Check page order, patient identity and any cover information.

Follow the current application instructions for the device being used. Fax.Plus sending instructions.

For a transmission that needs prompt follow-up, identify the responsible staff member before sending. The next action should not depend on someone happening to notice the status later.

Check the result and complete follow-up

Review the transmission outcome rather than assuming that selecting Send completed the task.

If the fax fails, investigate the reported issue and follow the practice’s resend process. An incorrect number or unavailable receiving equipment requires a different response from an unreadable source document.

For a successful transmission, retain the appropriate confirmation with the relevant record or approved tracking process.

A successful fax transmission does not, by itself, confirm that a clinician has read the document or filed it in the patient’s chart. When the next action requires acknowledgment, arrange that follow-up separately. Fax.Plus transmission and security FAQ.

Can you fax medical photographs?

Sometimes, but first establish what the recipient needs to see.

A scanned paper form is different from a clinical photograph. A referral letter may remain useful after fax conversion, while subtle colors or fine visual details in a clinical image may not.

An image associated with an identifiable patient can also be PHI, even if the patient’s face is not visible. Handle clinical photographs through the organization’s approved capture, storage and disclosure process.

Fax can change image appearance

Fax transmission can change shading, contrast and fine detail.

Fax.Plus supports color transmission between Fax.Plus users. Do not assume that a fax sent to another service or fax machine will preserve color. Fax.Plus color fax guidance.

HD mode can improve image detail, but the received resolution depends on the receiving device. Higher-quality settings do not establish diagnostic-image fidelity. Fax.Plus transmission optimization.

Before adopting a document workflow, test representative examples containing no patient information with the receiving organization. Confirm that the resulting pages meet the intended purpose.

Preserve the original clinical image

Keep original clinical photographs in the organization’s approved clinical system.

When a specialist requires the original image, detailed color comparison or a dedicated imaging format, use the accepted clinical image-sharing process. Fax can carry the accompanying written report or referral where appropriate.

A clinical photography application may address capture, comparison and storage. A fax service addresses delivery through fax numbers. Assess the capabilities and safeguards of each service involved.

Handle phone and backup copies deliberately

Do not assume that importing or faxing an image deletes its original or any copies in your phone’s gallery or backups.

Use approved devices and storage arrangements. Follow the organization’s process for local copies, including retention and removal where appropriate.

Do not assume that the Fax.Plus BAA covers separate capture, storage or sharing apps. The protection of an image before upload and the handling of copies outside the fax account require their own assessment.

When sending a fax, what must the medical assistant check?

Use this final review within the practice’s procedures:

1. Disclosure: Is the request permitted, and has any required authorization or review been completed?
2. Patient: Do all pages belong to the intended patient?
3. Recipient: Is the destination verified and entered correctly?
4. Packet: Are the pages complete, ordered and readable?
5. Images: Is fax suitable for the visual information the recipient needs?
6. Follow-up: Who checks the transmission result and handles exceptions?

This review supports consistent handling and complements the organization’s training and records-release process.

For unfamiliar requests, sensitive record categories or conflicting instructions, obtain the appropriate internal review before sending.

How long does faxing medical records take?

Transmission time varies with the number and complexity of pages, quality settings, destination availability and receiving equipment.

A short packet does not have a guaranteed instant delivery time. A busy receiving line can delay completion, while images and higher-quality documents can take longer to transmit.

For a deadline, allow time to investigate an unsuccessful send and confirm any required receipt.

If retry options are available, understand the current settings and monitoring process. Do not assume that a failed transmission will always complete later without staff attention.

What to do with incoming medical records

Assign staff to monitor the receiving workflow, check the patient and document type, and route the material to the appropriate team. Establish coverage for absence and periods when the usual queue owner is unavailable.

Review completeness and readability before relying on the packet. Contact the sender if pages are missing or essential information cannot be read.

Then file the records through the organization’s approved process. Receipt in a fax inbox does not automatically place the document in the correct patient chart.

Apply the appropriate access and retention policies to the fax, downloaded copies and records-system copy. An application’s default storage setting should be assessed against the organization’s retention requirements.

What if medical records go to the wrong fax number?

For a misdirected medical-record fax, notify the organization’s privacy or incident-response contact promptly.

Preserve the transmission details and follow the established mitigation process. Where appropriate, that process may include contacting the unintended recipient and requesting suitable handling of the documents.

Do not assume that deleting the sender’s copy retracts the received fax.

An impermissible disclosure is generally presumed to be a breach unless an applicable exception or documented assessment establishes otherwise. The responsible team should assess the incident and notification obligations; a recipient’s reassurance alone should not end the review. HHS Breach Notification Rule.

Send medical records with Fax.Plus

Fax.Plus lets staff prepare and send medical documents through a browser or mobile application, including scanning paper documents with the mobile app.

For PHI, use Enterprise with Advanced Security Controls enabled and a signed BAA. Build the sending process around verified recipients, reviewed documents and assigned follow-up responsibilities.

When photographs are involved, establish whether fax preserves the information the receiving team needs. Keep the original clinical image in the approved system and use an accepted image-sharing method when clinical fidelity matters.

Contact the Fax.Plus team to discuss an Enterprise setup for your organization’s medical-records workflow.