Guide

Labs without a health system: standing orders, results, follow-up

Summary

A solo prescriber arranges lab monitoring by opening an account with a reference laboratory, writing standing orders for the recurring panels each medication needs, and building a closed-loop process that guarantees every result is seen and acted on. Sending specimens out to a certified lab keeps you clear of in-office testing certification, and drug-specific programs like the clozapine monitoring schedule set the cadence for you. The safety risk is not ordering the test — it is the result nobody reviewed.

By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.

How a solo prescriber sets up lab monitoring

As a solo prescriber, you arrange lab monitoring the way any small practice does: open an account with a reference laboratory, write standing orders for the panels each medication requires, send patients to a draw site, and build a process that guarantees every result gets seen and acted on. No hospital lab is required behind you. What matters is the closed loop, because the dangerous failure is rarely the missing test — it is the abnormal result no one reviewed.

The rest is logistics you can set up in a week: the lab account, the requisition templates, the results routing into your EHR, and a written rule for who looks at every value and how fast. The pieces are ordinary; the discipline of doing them the same way every time is what protects both the patient and the practice.

Drug-specific monitoring you can't skip

Some monitoring is not discretionary — the drug dictates it. Clozapine is the clearest example: it is dispensed under a REMS that ties continued dispensing to a schedule of blood-count monitoring, and the pharmacy will not release the drug without current results in the program 1Ref 1U.S. Food and Drug Administration (2026).Risk Evaluation and Mitigation Strategies (REMS).That clozapine is dispensed under a REMS tying continued dispensing to a schedule of blood-count monitoring, so the pharmacy will not release the drug without current results.. Other agents carry their own expected cadences, such as serum levels for lithium and metabolic monitoring for antipsychotics. Map each medication you prescribe to the labs it demands before you write it.

The REMS case is instructive because it removes your discretion entirely: without the monitoring, the drug does not flow, full stop. Treat the drug-mandated labs as a hard dependency in your workflow — the refill and the lab result are linked, and the lab has to come first. A simple table of drug, required panel, and expected interval, kept where you prescribe, prevents the quiet drift where monitoring lapses because nothing forced it.

Opening a reference-lab account (and the CLIA question)

Opening a reference-lab account is a straightforward vendor setup: you establish the account under your practice and NPI, get requisition access, and point patients to the lab's patient-service centers for the draw. The lab collects, runs the panel, and returns the result to you. Sending specimens out this way keeps most solo practices clear of in-office testing, which brings its own certification questions under CLIA — questions most prescribers avoid entirely by not testing on-site.

Set up standing orders and requisition templates for the recurring panels so a monitoring draw does not require a fresh order every time. Keep the lab account distinct in your mind from drug samples: specimens go out to the lab, while any medication samples you hold follow separate storage rules. If you refer to more than one lab, standardize which one gets which panel so results come back in a predictable place.

Getting results back — and the ePHI that comes with them

Every result that comes back is electronic protected health information, and the interface that delivers it is part of your practice's security surface. The HIPAA Security Rule requires administrative, physical, and technical safeguards for ePHI, scaled to the size of your practice and anchored in a risk analysis 2Ref 2HHS Office for Civil Rights (2026).Summary of the HIPAA Security Rule.That the HIPAA Security Rule requires administrative, physical, and technical safeguards for ePHI, scaled to practice size and anchored in a risk analysis, covering the lab results feed and the systems that store it.. The lab results feed, the EHR that stores them, and the device you read them on all fall inside that boundary — not outside it because a lab sent them.

You do not have to build the risk analysis from scratch. ONC and OCR publish a free Security Risk Assessment tool sized for small practices to run exactly this analysis 3Ref 3Office of the National Coordinator / ASTP (2026).Security Risk Assessment Tool.That ONC/OCR publish a free Security Risk Assessment tool sized for small practices to conduct the required risk analysis, into which the lab interface can be inventoried.; working through it once documents your safeguards and gives you the record regulators expect. Add the lab interface to the inventory of systems it covers, and revisit it when you change labs or EHRs.

Closing the loop: the abnormal result you must act on

The closed loop is the part no vendor sets up for you, and it is where solo practices are most exposed. In a health system, a result nobody opens still gets caught by someone; alone, the only safety net is the process you wrote. Decide in advance who reviews every value, how fast a critical result is escalated, and how you reach a patient you cannot get on the phone. Then document that the review happened.

Tie the loop to your refill policy so monitoring cannot silently lapse: if a required level is overdue, the refill pauses until the draw happens. That single rule handles the common no-show plus refill request pattern, where a patient skips the lab but still wants the medication continued. Some monitored medications also carry psych-med prior auths, so the result and the authorization sometimes both have to line up before a refill clears. Keep a short worklist of pending draws and outstanding results, and clear it on a fixed schedule rather than trusting memory.

When the visit is telehealth

When the visit is by video, the labs still happen in person — the patient just goes to a local draw site instead of your office. Telepsychiatry handles the clinical encounter and the medication management well 4Ref 4American Psychiatric Association (2026).Telepsychiatry Toolkit.That telepsychiatry carries the clinical encounter and medication management for a video-based prescriber whose patients use local reference-lab draw sites for specimen collection., but the specimen has to be collected somewhere, so a telehealth prescriber's setup leans harder on reference-lab patient-service centers near the patient. Send the standing order to a location the patient can actually reach, and confirm the result routed back before the visit.

Monitoring is also visible to payers. Several HEDIS measures reach into outpatient behavioral-health practice patterns — including metabolic monitoring for patients on antipsychotics 5Ref 5National Committee for Quality Assurance (2026).HEDIS.That several HEDIS measures reach into outpatient behavioral-health practice patterns, including metabolic monitoring for patients on antipsychotics, so ordered labs are part of the quality picture plans track. — so the labs you order are part of the quality picture plans track, not only a clinical safeguard. Fitting these draws into the solo prescriber's schedule, alongside the medication reviews they inform, keeps monitoring routine rather than reactive. For prescribers who also stock injectables, the same who-is-due tracking that keeps labs on schedule applies to lais in a solo practice.

Common questions

No. A solo prescriber monitors medications by opening an account with a reference laboratory and sending patients to its patient-service centers for the draw; the lab runs the panel and returns the result. Sending specimens out this way also keeps most practices clear of the in-office testing certification questions that come with running assays yourself. The setup is a routine vendor relationship, not a laboratory build-out.

Write the process before you need it. Decide who opens every result, how fast a critical value is escalated, and how you reach a patient who does not answer, then document that the review occurred. Alone, there is no colleague to catch a missed result, so the written loop is your safety net. A dated worklist of pending draws and outstanding results, cleared on a fixed schedule, keeps anything from falling through.

The clinical visit happens by video, but the specimen is still collected in person. Send the standing order to a reference-lab patient-service center the patient can reach, and confirm the result routed back before the appointment. Telepsychiatry carries the encounter and medication management well; it simply cannot draw blood, so a telehealth setup relies on draw sites near each patient rather than a lab in your building.

Yes. A result delivered electronically is protected health information, and the interface, the EHR that stores it, and the device you read it on all sit inside your Security Rule obligations — scaled to your practice size and anchored in a risk analysis. The free Security Risk Assessment tool from ONC and OCR is built for small practices to document exactly those safeguards; add the lab feed to the systems it covers.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.U.S. Food and Drug Administration (2026). Risk Evaluation and Mitigation Strategies (REMS). U.S. Food and Drug Administration. link ✓That clozapine is dispensed under a REMS tying continued dispensing to a schedule of blood-count monitoring, so the pharmacy will not release the drug without current results.
2.HHS Office for Civil Rights (2026). Summary of the HIPAA Security Rule. U.S. Department of Health and Human Services. linkThat the HIPAA Security Rule requires administrative, physical, and technical safeguards for ePHI, scaled to practice size and anchored in a risk analysis, covering the lab results feed and the systems that store it.
3.Office of the National Coordinator / ASTP (2026). Security Risk Assessment Tool. HealthIT.gov. link ✓That ONC/OCR publish a free Security Risk Assessment tool sized for small practices to conduct the required risk analysis, into which the lab interface can be inventoried.
4.American Psychiatric Association (2026). Telepsychiatry Toolkit. American Psychiatric Association. link ✓That telepsychiatry carries the clinical encounter and medication management for a video-based prescriber whose patients use local reference-lab draw sites for specimen collection.
5.National Committee for Quality Assurance (2026). HEDIS. National Committee for Quality Assurance (NCQA). link ✓That several HEDIS measures reach into outpatient behavioral-health practice patterns, including metabolic monitoring for patients on antipsychotics, so ordered labs are part of the quality picture plans track.

https://www.gale.care/for-providers/bhp-lab-monitoring-arrangements · 5 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers