Patients have a right to a copy of their records, and emailing a PDF is the slow way to give it. A data access link lets them read and download everything themselves, for a day, from a page you can revoke.
When a patient asks for their records
Rather than printing a file, you can email the patient a secure link to a page of their own records. It shows their contact details, every appointment, every invoice, and their clinical notes and completed forms, and lets them prepare a full copy as a zip of files they can keep or give to another provider. Nothing on the page can be edited.
Open the patient's record and choose to share their data from the header
The confirmation says what will be emailed and that the link expires in 24 hours. Select Send. The patient must have an email on file; otherwise you're told No email on file for this patient.
The patient opens the link
The page is headed Your health records. It lists Personal details, Appointments, Invoices & payments with the current balance and account credit, Clinical notes & forms and Other records on file. They can print it, or select Prepare full copy and then Download zip once it's ready: a zip with every record (data.json), a FHIR file for other health systems, PDFs and your uploaded files. A prepared copy is kept for a day so they can come back for it.
Limits and revoking
- Each link works for 24 hours. After that the patient sees This link is invalid or has expired and you can send a new one.
- At most five links can be issued for one patient in a day.
- Data access links on the record header lists the links that are still live, with a Revoke for each, for a link sent to the wrong address or at the wrong time.
- Each send and each view is recorded in the patient's History and the clinic's audit log.