13.4 Organizing the EHR: Patient Portal, Report Types & Pre-Visit Planning
Key Takeaways
- The history and physical documents the admission or initial evaluation, the operative note documents what was performed in surgery, the discharge summary reconciles the whole hospitalization, and the consultation report records a specialist's opinion returned to the requesting provider.
- A patient portal must be enabled only after identity is verified in person or through a secure equivalent; enrolling a patient from a telephone request alone is an impermissible disclosure risk.
- Adolescent and proxy portal access must be configured to respect state minor-consent law, because a parent proxy account can otherwise expose confidential adolescent records.
- Pre-visit planning assembles outside records, prior imaging and laboratory results, and open care gaps before the appointment so the provider is not making decisions from an incomplete chart.
- Outside records are requested with a signed, HIPAA-compliant authorization from the patient, and incoming records are labeled as external source documents rather than merged into the practice's own clinical notes.
Recognizing Standard Report Types
A medical assistant routinely files, routes, and retrieves documents from many sources. Misfiling one is a patient safety issue, so the exam expects you to recognize each report by its purpose.
| Report | Author and setting | Purpose and contents |
|---|---|---|
| History and physical (H&P) | Admitting or evaluating provider | Comprehensive baseline: chief complaint, history of present illness, past medical, family and social history, review of systems, physical examination, assessment and plan. Generally required within 24 hours of admission and before surgery |
| Operative note | Surgeon, dictated immediately after the procedure | Pre- and post-operative diagnoses, the procedure performed, surgeon and assistants, anesthesia type, findings, specimens removed, estimated blood loss, complications, and patient condition on leaving the operating room |
| Discharge summary | Attending provider at end of hospitalization | Reason for admission, significant findings, procedures and treatment, condition at discharge, discharge medications, and follow-up instructions. The single most important document for continuity after a hospitalization |
| Consultation report | Specialist, addressed to the requesting provider | The specialist's findings, impression, and recommendations returned to the referring provider; a consultation gives an opinion, whereas a referral transfers care |
| Diagnostic test / laboratory report | Laboratory or imaging facility | Result values with reference ranges, or the radiologist's interpretation. Routed to the ordering provider for review and signature before filing |
| Clinic progress note | Treating provider at each encounter | Interval history, examination, assessment and plan; commonly in SOAP format |
| Growth charts, graphs, and flow sheets | Clinical staff over time | Serial data plotted for trend recognition — pediatric growth percentiles, blood pressure trends, anticoagulation logs, immunization records |
The most tested contrast is operative note versus discharge summary. The operative note covers a single procedure and is written the day of surgery; the discharge summary covers the entire admission and is written at the end. A postoperative patient's follow-up appointment needs both, and they are separate documents.
Results are not filed before review. A laboratory or imaging report is routed to the ordering provider, reviewed, and acknowledged (signed or initialed) before it is filed. Filing an unreviewed abnormal result is a classic failure-to-follow-up allegation.
A patient returns for a postoperative visit two weeks after an appendectomy. The provider wants to know exactly what was found in the abdomen during surgery and whether any specimen was sent to pathology. Which document should the medical assistant retrieve?
The Patient Portal
A patient portal is a secure web application through which patients view results, request refills and appointments, send messages, and read visit summaries. Portals satisfy the HIPAA right of access and support meaningful-use style quality programs, but they also create a new disclosure surface that must be managed.
Enrollment and identity verification
Portal access is granted only after identity is verified — in person against a government-issued photo identification, or through an equivalent secure remote process. A portal account must never be enabled solely on the basis of a telephone request, because the caller's identity cannot be confirmed and the account grants ongoing access to the entire record. The patient sets their own password; staff never record, share, or set the patient's password for them.
Proxy and adolescent access
Proxy access lets a parent, guardian, or caregiver view another person's record, and it is the portal's single largest confidentiality hazard. Two rules govern it:
- Proxy access requires documented authority — parental status for a minor, guardianship papers, or a signed authorization from a competent adult — and it is terminated when that authority ends.
- Adolescent records require special configuration. Most states allow minors to consent independently to some care (commonly reproductive health, sexually transmitted infection treatment, mental health, and substance use treatment), and those records may not be disclosed to a parent without the minor's consent. Practices therefore restrict or suppress proxy access during the adolescent years and re-enroll the patient in their own account.
Messaging and results release
Portal messages are part of the designated record set and are retained accordingly. Portal messaging is not an emergency channel, and every portal displays that notice; a patient who messages about chest pain is telephoned immediately. Practices configure how quickly results release to the portal, balancing the federal information-blocking expectation of prompt access against the clinical wish to contextualize a serious result, and staff follow the practice's configured policy rather than releasing or withholding results ad hoc.
Pre-Visit Planning
Pre-visit planning prepares the chart before the patient arrives so the visit is not spent hunting for information. It typically occurs one to several days ahead and covers:
- Assemble outside records. Hospital discharge summaries, specialist consultation reports, imaging performed elsewhere, and prior laboratory results.
- Confirm results are back. Verify that studies ordered at the last visit have returned and are in the chart; chase the ones that have not.
- Identify care gaps. Overdue immunizations, screenings, and chronic disease monitoring — the hemoglobin A1C, the foot examination, the mammogram.
- Pre-order standing labs. Where a standing order permits, arrange for the patient to complete labs before the visit so results are available during it.
- Verify insurance and authorization. Confirm eligibility and any referral or authorization required.
- Reconcile medications and update the problem list.
Requesting outside records
Records from another provider are obtained with a signed, HIPAA-compliant authorization from the patient that names the disclosing entity, the recipient, the specific information, the purpose, an expiration date or event, and the patient's signature and date. Records with heightened protection — substance use treatment records under 42 CFR Part 2, HIV-related information, mental health and psychotherapy notes, and genetic information — commonly require a specific authorization that separately identifies them.
When outside records arrive, label them as external source documents identifying the originating facility and date. They are not merged into the practice's own notes and are not altered. If the patient believes an outside record is wrong, the amendment request goes to the originating provider, not to the practice that merely received a copy.
A parent calls and asks the practice to enable portal access to the record of her 16-year-old daughter, who was recently seen for a confidential reproductive health visit. What is the appropriate response?
During pre-visit planning for tomorrow's appointments, the medical assistant finds that a chest CT ordered at the last visit has no result in the chart. What is the correct action?