Selling a medical practice in Virginia entails responsibilities that extend beyond contracts and negotiations. Every practice holds years of confidential patient histories, treatment plans, and personal information that must be handled with care during the transition. When ownership changes, patients still need reliable access to their records and clarity about where their information will go.
Virginia’s patient notification rules exist to protect that trust. Understanding these requirements early allows physicians to approach the sale process with confidence while keeping patient rights and privacy at the center of every step.
The Foundation of Trust: Why Patient Notification Matters
Medical records are sensitive information. In Virginia, providers must carefully manage them right up until the day their practice changes hands. That includes keeping them confidential, maintaining them for the legally required period, and notifying patients of what is happening to their records when you sell your practice.
Virginia law requires physicians to make reasonable efforts to notify patients when a practice closes, relocates, or changes ownership so patients can request copies or transfer their medical records. Under Virginia Code § 54.1‑2405, a provider cannot transfer records related to a current patient (someone who had an encounter within the last two years) without first notifying that patient of the change. This means reasonable efforts, such as mailed or electronic notice and public announcements.
The goal of this law is simple. Patients should not lose access to their records just because you are closing or selling the practice. They need to be told that they can have their files sent to a new provider or get copies themselves.
How HIPAA Works with Virginia Law
Federal privacy rules under HIPAA (Health Insurance Portability and Accountability Act) also govern how patient information is handled. This includes how records are released and how patients must be informed of their rights. HIPAA requires practices to have a HIPAA notice of privacy practices that explains how medical information may be used and disclosed.
Even when you are selling a practice, you must continue to respect those privacy rights. HIPAA gives patients the right to access their records, request corrections, and get a list of disclosures. You may use a medical records release form to document patient instructions for sharing their files. Patients can sign such forms to have their records sent to a new provider or third party. Hence, providers may request a release form if patients choose to direct their records to another provider.
In general, HIPAA and Virginia’s record transfer requirement work together. HIPAA addresses privacy, and state law focuses on notifying patients when a practice closes, relocates, or changes hands.
Handling Records During a Sale
Carefully managing patient records during a practice sale is crucial for maintaining confidentiality and meeting legal obligations. Mishandled records can create liability issues, erode patient trust, and complicate the transfer process. Establishing a clear system for record handling helps protect both patients and the new practice owner.
In addition, practitioners must comply with the requirements of the Virginia Code regarding the confidentiality and disclosure of patient records, ensuring that all handling and sharing of medical information align with the provisions of § 32.1-127.1:03.
Practical tips for handling records include:
- Follow state retention rules: Keep adult and minor patient files in accordance with Virginia’s requirements. Do not discard records prematurely, even if the practice is sold.
- Secure confidential information: Store physical records in locked cabinets and use secure digital platforms for electronic files. Limit access to authorized personnel only.
- Use signed medical records release forms: Obtain patient consent for transferring records to a new provider. Ensure forms are properly completed and stored for documentation purposes.
- Track transfers and requests: Maintain a log of all requests and transfers to demonstrate compliance and support any patient follow-up inquiries.
- Coordinate with the buyer: Clarify which party will handle ongoing patient requests after the sale. Include responsibilities in the business purchase agreement to avoid confusion.
Proper record management reassures patients that their information is safe, demonstrates regulatory compliance, and increases buyer confidence in your practice’s integrity.
When you decide to list a medical business for sale in Virginia, your patient records become a central part of the negotiation. Our team at Strategic Medical Brokers works with you to ensure your business sale agreement clearly defines record custody and access.
Virginia Copying Fee Limits for Medical Records
Virginia law allows healthcare providers to charge reasonable fees for copies of patients’ medical records. Under §54.1-2405 of the Code of Virginia, providers may recover the actual cost of copying, preparing, and delivering the records. These charges must remain fair and reflect the actual expenses of producing the copies. Patients must also be informed of any fees before records are released to avoid unexpected costs. When a medical practice is being sold, explaining these potential charges in patient notifications helps maintain transparency and prevents confusion during the transition.
HIPAA Civil Penalties for Privacy Violations
Failing to protect patient information can result in significant penalties under federal law. The U.S. Department of Health and Human Services (HHS) enforces HIPAA regulations and can issue fines when healthcare organizations mishandle protected health information.
HIPAA Violation Type | Penalty Range |
Unknowing | $100 – $50,000 per violation, with an annual maximum of $25,000 for repeat violations |
Reasonable Cause | $1,000 – $50,000 per violation, with an annual maximum of $100,000 for repeat violations |
Willful neglect but violation corrected within the required time period | $10,000 – $50,000 per violation, with an annual maximum of $250,000 for repeat violations |
Willful neglect and not corrected within the required time period | $50,000 per violation, with an annual maximum of $1.5 million |
These potential penalties highlight the importance of maintaining strong privacy practices during a practice sale. Careful record management, proper documentation, and adherence to patient notification rules help reduce the risk of compliance problems and protect both the seller and the buyer.
Tips for Smooth Patient Communication
Clear and compassionate communication with patients is essential when selling a medical practice. Patients may feel uncertain about accessing their records or concerned about who will manage their healthcare going forward. Taking the time to explain the process in simple, respectful language can reduce confusion and build trust. Providing multiple ways for patients to reach out and submit their requests, along with clear timelines, ensures they feel supported throughout the transition. Using both traditional and digital methods can make it easier for patients to receive the information and records they need.
- Draft clear notices: Include concise information about the sale, options for accessing records, potential costs, and deadlines. Use simple language that all patients can understand.
- Set response timelines: Clearly state how long patients have to submit a medical records request and how long the practice will take to process the request.
- Offer multiple contact options: Provide phone numbers, email addresses, and office locations for submitting requests or asking questions.
- Use digital solutions: Consider secure patient portals or encrypted email for record requests. This enables faster processing and provides patients with convenience.
- Provide examples or templates: Include sample wording for notices or forms to guide patients on how to request records properly.
- Follow up when needed: Check in with patients who have not responded within the stated timeframe to remind them about their options.
- Document all communication: Keep copies of notices, emails, and forms submitted by patients. This protects both the practice and patients and shows compliance with Virginia law.
By following these steps, you protect your patients, your reputation, and the value of your practice. You also make a potential buyer more confident about the practice you are transferring, its compliance history, and its stability.
Frequently Asked Questions
Providers must make reasonable efforts to notify patients and allow them to request copies or transfers of their records. Patients can request copies or have their files sent to a new provider of their choice.
It governs patient access to medical records and reasonable copying fees, and supports patient rights during practice changes. The notice must be published in a newspaper of general circulation in the practice area.
Selling patient information without consent can violate federal privacy rules and state law. Records must be transferred with proper notice, and privacy protections must remain in place under HIPAA and state regulations.
Both Virginia law on record transfer and federal HIPAA privacy rules apply. Practices must give proper notice, document access, and follow privacy practices when disclosing medical files.
Final Thoughts
Selling your medical practice in Virginia is not just about the deal you make with a buyer. You must follow patient record rules that protect access to personal health information. Under § 54.1‑2405 of the Code of Virginia, physicians must make reasonable efforts to notify patients and provide an opportunity to request copies or transfer their records.
Paying careful attention to patient notifications, retention rules, and privacy practices safeguards your patients and your legacy. Are you planning to list your medical practice for sale and need expert support with patient notifications, record handling, and compliance to protect your practice’s value? Strategic Medical Brokers can guide you through every step with clarity.
