Immigration enforcement at your practice: warrants, records, and the waiting room

First minutes: run a protocol, not a confrontation

When enforcement agents arrive, the goal is calm compliance with the law and nothing more — not obstruction, and not volunteering. Designate one person to speak, greet the agents in the public area, and ask why they are here and exactly what they are asking for. Do not answer questions about specific patients, do not let anyone be walked to the back, and reach for the written protocol you prepared before this day.

The first person to reach the desk sets the tone. A useful opening is neutral and short: ask for identification, ask the purpose of the visit, and ask whether they have a warrant. Then act on the answers rather than on adrenaline.

• One speaker. Route all interaction through a designated staff member or you; everyone else keeps working and says nothing about patients.
• Read, don't react. Ask to see any warrant and actually read it before responding.
• Log it. Note the time, the agency, names and badge numbers if offered, and what was asked and produced.

Public areas versus private areas — and the warrant

Your waiting room is effectively a public space; your treatment rooms, file storage, and back office are not. Agents may enter public areas as any member of the public can, but the protocol many health settings adopt turns on one question before anyone goes further: is the warrant signed by a judge? A judicial warrant is a different instrument from an administrative immigration warrant, and confirming which you are holding is the pivot point — verify the specifics with an immigration attorney, because this area shifts.

In practice, this means you can decline consent for agents to enter non-public areas absent a warrant signed by a judge, and declining consent is lawful. Handling these law enforcement requests calmly is the same muscle you use for any officer at the front desk: confirm the paperwork, keep patients out of it, and call counsel. If a warrant signed by a judge is presented, comply with what it specifies and no more, and keep your log running the whole time.

The records demand is a HIPAA question

A request for a patient's records is not an immigration question first — it is a HIPAA one, and the covered-entity test that makes you a HIPAA actor still governs who can compel what. You may not disclose protected health information to any law enforcement, immigration included, without proper legal process. A court order authorizes disclosure only of what the order specifies; a records-subpoena without a court order requires satisfactory assurances of notice or a protective order before you release anything 1Ref 1HHS Office for Civil Rights (2026).Court Orders and Subpoenas.That a court order authorizes disclosure only of what it specifies, while a subpoena without a court order requires satisfactory assurances of notice or a protective order — the analysis that governs any records demand, including from immigration enforcement.. The minimum-necessary rule still binds every disclosure you do make 2Ref 2HHS Office for Civil Rights (2026).Summary of the HIPAA Privacy Rule.That the Privacy Rule governs disclosures of PHI by covered entities and that the minimum-necessary rule binds any disclosure to law enforcement..

That means an administrative warrant or a verbal demand is not, by itself, authority to hand over a chart. If psychotherapy notes are implicated, treat them as their own locked category and route the question to counsel before releasing anything. The hipaa-privacy analysis you would run for the subpoena in a civil case is the same analysis here: identify the instrument, confirm the process, disclose only what is compelled.

The "sensitive locations" policy has shifted — don't rely on memory

For years, federal policy discouraged enforcement at or near health care facilities, but that guidance has been changed and reissued more than once and cannot be assumed to protect your office today. As of July 2026, treat the sensitive-locations posture as volatile: confirm the current federal policy, and any state-law protections that may apply, with counsel before you rely on any version of it. Build your response on the warrant-and-records analysis, which does not depend on that policy at all.

The practical lesson is to not anchor your plan to a rule that may have moved. A protocol that says "they cannot come here" ages badly; a protocol that says "confirm the warrant, protect the records through process, call counsel" holds regardless of which way the sensitive-locations policy has swung this year.

Write the protocol before you need it

The worst time to design a response is while agents are standing at the desk, so build the plan into your practice's continuity and emergency-communications planning now. A federal small-business preparedness framework gives you the structure — a risk assessment, a written plan, and a communications tree — scaled down to a practice of one 3Ref 3U.S. Department of Homeland Security (2026).Ready.gov Business.The federal small-business preparedness framework — risk assessment, a written plan, and emergency communications — scaled to a practice of one, giving the structure for a written front-door protocol.. Reduce it to a one-page script, a named person to reach counsel, and a short staff drill so the plan lives in muscle memory rather than a binder.

A workable one-pager covers: who speaks, what to ask for, where agents may and may not go, the sentence that declines consent to non-public areas absent a judicial warrant, the records rule (no PHI without proper legal process), and the phone tree — counsel first. Rehearse it once, revisit it when policy shifts, and keep it where the front desk can grab it in ten seconds.

What not to do

Two mistakes turn a stressful hour into a criminal or licensure problem. Do not obstruct, lie to, or physically interfere with agents — declining consent is lawful, but deception and interference are not, and they hand the visit a very different character. And do not hide, alter, or destroy any record in response to a demand: that is its own offense and it collides with your ordinary obligations to maintain and, when lawfully required, produce records.

Protect your patients through process, never through concealment. Everything you are entitled to do — read the warrant, decline consent to private areas, refuse to disclose PHI without proper legal process, call counsel — is quiet, lawful, and documented. If you feel pressured to go beyond what a warrant compels, that pressure itself is the signal to pause and get counsel on the line before another word.