When a patient dies: the record, the family, the balance, the grief
Summary
When a patient dies, the chart stays protected and must be retained on your state's schedule, not purged. Only the personal representative — usually the estate's executor or administrator — can access the record or authorize its release, and grieving family members without that authority generally cannot. Verify who is asking before you disclose anything, handle any outstanding balance through the estate rather than the family, and give yourself room to grieve a patient you lost.
By Gale Editorial · Updated 2026-07-27. Every figure cited to a dated source. How we write.
The record does not close when the patient does
A patient's death does not release you from your duties to the record — it extends them. HIPAA continues to protect a decedent's health information for 50 years after death, so the chart stays confidential and cannot be shared more freely just because the patient is gone 1Ref 1HHS Office for Civil Rights (2026).Health Information of Deceased Individuals.That HIPAA protects a decedent's protected health information for 50 years after death, so the record stays confidential and cannot be shared more freely simply because the patient has died.. Do not purge the file, do not hand it to whoever asks, and do not treat the death as the end of your obligations to it.
Keep the chart for your full retention period, which the death does not shorten. Retention is set by state law and professional guidance rather than by whether the patient is living: the APA's record-keeping guidelines use seven years after the last service for adults, and longer for minors, while always deferring to the stricter state rule 2Ref 2American Psychological Association (2007).Record Keeping Guidelines.That professional record-keeping guidance uses seven years after the last service for adults and longer for minors as a retention example, always deferring to the stricter state rule, applied here from the last date of service rather than the date of death.. Confirm your own state's retention clock and apply it from the last date of service, not from the date of death, and store the closed chart as securely as an active one.
Be clear on chart ownership, because families often assume the record dies with the patient. You own the physical or electronic medical record as the maker and custodian, while the information in it belongs to the patient and, after death, is controlled through the estate. Understanding who owns the medical record versus who controls access to its contents is what keeps the next two sections straight: possession is yours, but the right to see or release the information now runs through a specific person.
Who can access the record now
After a death, the person who steps into the patient's shoes is the personal representative — and only that person holds the access and disclosure rights the patient once held. Under HIPAA, the executor or administrator of the estate, or another person authorized under state law to act for the decedent, is treated as the individual for purposes of the health information, which means they can request the record and authorize its release 3Ref 3HHS Office for Civil Rights (2026).Personal Representatives.That HIPAA treats the estate's personal representative as the individual for the decedent's health information and defers to state law on who qualifies, so a practice verifies authority before disclosing to any relative.. A spouse, adult child, or parent has no automatic right merely by relationship.
State law decides who qualifies, so verify authority before you treat anyone as the representative. HIPAA defers to state law on who controls a decedent's records, and the proof is usually a court document — letters testamentary or letters of administration naming the executor or administrator 3Ref 3HHS Office for Civil Rights (2026).Personal Representatives.That HIPAA treats the estate's personal representative as the individual for the decedent's health information and defers to state law on who qualifies, so a practice verifies authority before disclosing to any relative.. Ask for that documentation and keep a copy in the file; a grieving relative's certainty that they are 'next of kin' is not, by itself, legal authority to access protected information.
Hold the line even when it is uncomfortable. A distraught family member who cannot yet produce estate paperwork does not gain access by pressing harder, and you protect the deceased patient's confidentiality — a professional-ethics duty that outlives the relationship — by waiting for proof of authority. Where relatives disagree about who speaks for the estate, that is a dispute for the probate court to settle, not for you to referee at the front desk; route them there and disclose only once authority is established.
Handling a records request after a death
When a records request arrives after a death, run it through the same access framework you would for a living patient, with the added step of confirming who is asking. Once the requester has shown they are the personal representative, they generally have the same right of access the patient held: to inspect and obtain copies within 30 days, for a reasonable cost-based fee, in the form and format requested where you can produce it 4Ref 4HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.That the access right lets a requester inspect and obtain copies within 30 days for a reasonable cost-based fee in the form requested where producible, and that separately kept psychotherapy notes are excluded — applied to a personal representative's post-death records request.. Note that psychotherapy notes kept separately are excluded from that access right 4Ref 4HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.That the access right lets a requester inspect and obtain copies within 30 days for a reasonable cost-based fee in the form requested where producible, and that separately kept psychotherapy notes are excluded — applied to a personal representative's post-death records request..
Work the request in a defined order so you neither over-disclose nor stall:
| Step | What to do |
|---|---|
| Verify authority | Obtain letters testamentary or administration, or the state-law equivalent, and file a copy |
| Confirm scope | Clarify what is being requested and whether psychotherapy notes are involved |
| Apply the clock | Respond within 30 days, using the single permitted 30-day extension only when necessary |
| Set the fee | Charge only a reasonable, cost-based fee for copies |
| Release and log | Provide the record in the form requested where producible, and document what you sent |
Disclosures to others follow different rules, so keep them separate from the representative's access right. Releasing information to a coroner or medical examiner, to law enforcement under a valid instrument, or for other permitted purposes is governed by the specific HIPAA provision that applies, not by the family's wishes. When in doubt about a request that is not from the personal representative, disclose the minimum the situation actually requires and document the basis.
The family: condolence without disclosure
The family will call, and you can be human without breaching confidentiality — the two are not in tension if you keep the line clear. Offer genuine condolences, listen, and share your own care for the person; what you cannot do is confirm clinical details, discuss the treatment, or even acknowledge protected information to someone who lacks authority. The Privacy Rule governs your use and disclosure of a patient's information after death just as before it, limited to what is permitted and to the minimum necessary 5Ref 5HHS Office for Civil Rights (2026).Summary of the HIPAA Privacy Rule.That the Privacy Rule governs use and disclosure of a patient's protected information, including after death, limited to permitted purposes and the minimum necessary, framing what a clinician may and may not say to a grieving family..
Separate compassion from disclosure in practice. You may express sympathy, attend a service, and answer general, non-clinical questions, but you cannot confirm diagnoses, share records, or discuss what happened in sessions with relatives who are not the personal representative. If a family member asks a clinical question, redirect gently to the estate process and to what the representative can obtain, rather than answering in the moment out of kindness.
Handle the exceptions deliberately. HIPAA permits certain disclosures to family or others involved in the person's care in narrow circumstances, and permits disclosures to a personal representative once authority is shown 5Ref 5HHS Office for Civil Rights (2026).Summary of the HIPAA Privacy Rule.That the Privacy Rule governs use and disclosure of a patient's protected information, including after death, limited to permitted purposes and the minimum necessary, framing what a clinician may and may not say to a grieving family.. When a permitted exception applies, disclose only what it covers; when it does not, a warm 'I'm so sorry, and I'm not able to share those details' is both compliant and kind. Documenting these conversations protects everyone, including the memory of the patient.
When the death is under investigation
Some deaths bring outside scrutiny — a medical examiner's inquiry, a coroner's request, a potential liability question, or a death that follows a mental-health crisis — and how you respond in the first days matters more than usual. The single most important rule is the one clinicians most often violate under stress: do not alter, backdate, or 'clean up' the record. An honest chart with imperfect notes is defensible; an edited one, discovered, is not, and any change after the fact reads as concealment.
Protect yourself and the record without becoming defensive. If there is any hint that a claim or complaint may follow, notify your malpractice carrier promptly and let them guide your communications, because early carrier involvement is what a policy is for. Cooperate with a coroner or medical examiner through the proper HIPAA channel, provide what a valid instrument compels, and keep a log of every disclosure. Resist the urge to add a lengthy self-justifying late entry; if a clarifying note is genuinely needed, date it as of today and label it as an addendum.
A death that follows a crisis carries a heavy weight for the treating clinician, and that is a real and expected part of this work. Reach for peer consultation and your own support rather than carrying it alone or, worse, second-guessing the record into a rewrite. The disciplined move — preserve the chart, notify your carrier, disclose only what is required, and seek support — protects both you and the integrity of the account of the care you gave.
The balance: billing after a death
An outstanding balance does not vanish when a patient dies, but how you pursue it should change immediately. A debt owed by a deceased patient becomes a claim against the estate, handled through the probate process, not a bill you send to a grieving spouse or child who has no personal obligation to pay it. Sending a routine collections notice to the family days after a death is both a relationship disaster and, in many cases, a pursuit of the wrong party.
Decide deliberately whether the balance is worth pursuing. Many solo practices write off small outstanding balances after a death as a matter of decency and practicality, reserving a formal estate claim for larger sums where a probate proceeding is already open. If you do pursue it, file a creditor claim in the probate estate within the process's deadlines and direct communications to the executor or administrator, not to the household. Keep any final billing accurate and route it through the estate.
Gifts and bequests are the mirror-image question, and they carry their own ethics. If a grateful family offers a gift, or you learn a patient named you in their will, the professional-ethics analysis is the same one that governs patient gifts during life: whether accepting could compromise, or appear to compromise, your professional judgment and boundaries. The common question of whether you may accept gifts from patients does not get easier because the patient has died — if anything, a bequest deserves more scrutiny, and declining is often the cleaner choice.
The clinician's grief, and the loose ends
Losing a patient is a professional bereavement that the solo clinician usually carries without a team to share it, and naming that is not indulgence — it is part of doing this work sustainably. You may feel grief, guilt, or a reflexive review of everything you did, and all of that is ordinary. Give it room: seek peer consultation, use your own therapy or supervision, and do not let a hard loss quietly erode how you show up for the patients still on your panel.
Close the practical loose ends with the same care you gave the person. Cancel and, where appropriate, gently explain the closed standing appointments; notify any co-treating providers who need to know so they are not left calling a patient who has died; and finalize the chart with a clear, dated closing entry. These small administrative acts also serve your own processing — they are the practice's way of formally acknowledging the loss.
Let a patient's death prompt you to shore up the plan for the harder mirror case: what happens when the clinician dies. The same instinct that makes you handle a patient's death with dignity should push you to build the professional will and records-custodian arrangement that protects your own patients if something happens to you — the anatomy of a professional will and the wider question of practice-closure are the continuity-planning pieces that turn a private catastrophe into an orderly handoff. Handling this loss well is also a reminder to prepare for that one.
Common questions
Run your practice on Gale
The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.
Start or manage a practice →References
- 1.HHS Office for Civil Rights (2026). Health Information of Deceased Individuals. U.S. Department of Health and Human Services. linkThat HIPAA protects a decedent's protected health information for 50 years after death, so the record stays confidential and cannot be shared more freely simply because the patient has died.
- 2.American Psychological Association (2007). Record Keeping Guidelines. American Psychological Association. link ✓That professional record-keeping guidance uses seven years after the last service for adults and longer for minors as a retention example, always deferring to the stricter state rule, applied here from the last date of service rather than the date of death.
- 3.HHS Office for Civil Rights (2026). Personal Representatives. U.S. Department of Health and Human Services. linkThat HIPAA treats the estate's personal representative as the individual for the decedent's health information and defers to state law on who qualifies, so a practice verifies authority before disclosing to any relative.
- 4.HHS Office for Civil Rights (2026). Individuals' Right under HIPAA to Access their Health Information. U.S. Department of Health and Human Services. linkThat the access right lets a requester inspect and obtain copies within 30 days for a reasonable cost-based fee in the form requested where producible, and that separately kept psychotherapy notes are excluded — applied to a personal representative's post-death records request.
- 5.HHS Office for Civil Rights (2026). Summary of the HIPAA Privacy Rule. U.S. Department of Health and Human Services. linkThat the Privacy Rule governs use and disclosure of a patient's protected information, including after death, limited to permitted purposes and the minimum necessary, framing what a clinician may and may not say to a grieving family.
https://www.gale.care/for-providers/ecp-patient-death-admin · 5 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.