Safety & Privacy

Intermediate

7 min read 5 stepsMay 8, 2026Verified May 2026

How to Protect Your Gender Identity in Medical Records

Plain-English guide to controlling who sees your gender identity, chosen name, and trans history in electronic medical records and patient portals.

At a Glance

Request a Full Copy of Your Medical Records

~57s

Under HIPAA, you have the right to see and get a copy of every medical record about you. Contact each provider you have seen in the past several years (primary care, specialists, hospitals, urgent care, pharmacy, mental health). Ask the front desk for a "medical records release form" or check the patient portal for a "records request" option. Fill out the form asking for your complete chart, including doctor's notes, lab results, imaging, billing records, and audit logs of who accessed your file. Federal law requires providers to respond within 30 days, and the fee is limited by law (usually free or under $50 per file). Once you have the records, store them safely. A fireproof box, a locked file cabinet, or an encrypted USB drive all work. Review each page for accuracy and look for places where your identity may be revealed without your control.

Quick Tip

Many patient portals (MyChart, FollowMyHealth, Healow) let you download records online for free in minutes. Log in, look for "Health Record" or "Document Center," and download or print the sections you want.

Add Chosen Name and Pronouns to Every Active Chart

~55s

Modern electronic health records have specific fields for "chosen name," "pronouns," "sex assigned at birth," and "gender identity." These are separate from the legal name field used for billing and insurance. For every active provider, ask the office manager or front desk to fill in these fields. The change tells every doctor, nurse, and front-desk worker your correct name and pronouns the moment they open your chart. If a staff member cannot make the change, ask to speak with the practice manager or the electronic health record administrator. You have a HIPAA right to accurate information in your record. After the visit, log in to the patient portal and confirm the changes saved. If they did not, message the office through the portal to follow up.

Warning

Some legacy records still use a deadname (old name) or wrong sex marker in older documents. You can request a formal HIPAA "amendment" to correct errors, but you cannot delete history. Old records remain in the chart but can be marked as superseded by the corrected information.

Mark Sensitive Sections With Break-the-Glass Protection

~45s

Most major hospital systems offer a feature called "break-the-glass" or "sensitive information protection" on certain parts of the chart. The feature blocks routine staff from seeing flagged sections. Only providers actively treating you can open the section, and the system logs every access. Ask your provider or the medical records department to mark these sections as sensitive if you want them protected: gender identity history, hormone therapy notes, gender-affirming surgery records, HIV status, mental health notes, and substance use history. The hospital may have a specific form for this request. Each hospital system handles it slightly differently, but the right exists under HIPAA's confidentiality protections.

Quick Tip

Ask the hospital records department: "Can you flag my chart with sensitive information protection for gender-related notes?" If they say no or do not know, ask to speak with the HIPAA Privacy Officer, who must respond by law.

Limit Disclosures to Insurance, Family, and Other Providers

~54s

HIPAA gives you the right to request that providers not share specific information with specific people, including insurance companies, family members, and other doctors. Fill out a "Request for Restriction" form with each provider. List exactly what cannot be shared with whom. For example: "Do not release any gender-related medical notes to (insurance company name)." You can also designate which family members can or cannot receive information about your care. By federal law, providers must accept the restriction if you pay out of pocket for the service in full. In other cases, they may negotiate but must consider the request. Keep copies of every restriction form. Some patients also fill out a HIPAA authorization that names one or two trusted people who can receive any and all information, with everyone else restricted.

Warning

Insurance companies have wide access rights for billing purposes. And you cannot block them entirely for covered services. To get full privacy on a procedure, you would need to pay out of pocket. Plan ahead for any especially sensitive care.

File a HIPAA Complaint if Your Privacy Was Violated

~51s

If a provider, hospital, pharmacy, or insurer shares your gender identity or trans status without your permission, you can file a free complaint with the US Department of Health and Human Services Office for Civil Rights. Go to hhs.gov/ocr or call 1-800-368-1019. The complaint form takes about 30 minutes to fill out. Describe what happened, when, who was involved, and what information was shared. The office investigates every complaint and can fine providers, require new training, and force policy changes. You have 180 days from the incident to file. Lambda Legal at 1-866-542-8336 and the Transgender Legal Defense and Education Fund at tldef.org also help with serious violations and can offer free legal advice. Keep a written log of every incident, including dates, names, witnesses, and a description of what happened.

Quick Tip

Save written proof. Screenshot patient portal messages, print after-visit summaries, and keep voicemails that show what was said. Documentation makes the complaint stronger and helps any later legal action.

You Did It!

You've finished reading: How to Protect Your Gender Identity in Medical Records

How well did this guide stick with you?

Need more help? Book a TekSure tech

Medical records hold some of the most personal information about you. For transgender and nonbinary people, they can hold details you may want every provider to see — or details you would rather share only with the specialists you trust.

Your gender identity, chosen name, gender-affirming care, hormone therapy, surgical history, and trans status all sit in your electronic health record. Often for life. Federal HIPAA law gives you strong rights to see this information, correct it, and limit who can reach it. But those rights only help if you know how to use them. Many trans and nonbinary older adults grew up before HIPAA existed — it passed in 1996 — and were treated by doctors who shared sensitive details without asking.

The stakes are real. A 2023 study by the Williams Institute found that one in five transgender older adults had a healthcare worker share their trans status without permission. It was often shared with family members, hospital staff, or insurance companies. Patients reported being outed in emergency rooms, in nursing homes, at pharmacies, and during routine checkups. The results ranged from awkward conversations to discrimination, denial of care, and harassment.

Older trans patients face the most risk. They may live in a nursing facility or assisted living, or see several specialists at once — settings where every staff member can open the chart.

The good news is that you have real tools. HIPAA, several state privacy laws, and the major medical records systems (Epic, Cerner, Allscripts, athenahealth, NextGen) all support them. You can ask for parts of your chart to be marked "sensitive," sometimes called "break-the-glass" protection. That means a provider has to take an extra step before they can see it. You can ask that certain information not go to specific insurers or family members. And you can review your whole chart, fix errors, and request a list of everyone who has looked at your records in the past six years.

This guide walks through all of it in plain English. How to get a copy of your full record. How to mark the sensitive parts. How to add your chosen name and pronouns while protecting older entries. How to file a HIPAA complaint if your privacy was violated. And how to plan ahead for emergencies, hospital stays, or end-of-life care.

These steps work at any age. They matter most for trans and nonbinary older adults juggling several Medicare providers, hospital systems, pharmacies, and home health agencies.

Rate this guide

How helpful was this guide?

lgbtq

transgender

privacy

medical records

hipaa

Official Resources

FTC Consumer Protection CISA — Cybersecurity Tips AARP Fraud Watch Network

Sources used to create and verify this guide. View all sources →

← Previous

How to Use SAGE Connect for LGBTQ+ Elders

How to Plan Inclusive End-of-Life Arrangements

Still stuck? Let a pro handle it.

A real person can walk you through this over the phone, anywhere in the US. If we can't fix it, you don't pay.

Book a Verified Tech How It Works

Learn more from official sources

Related Guides

How to Secure Your Home Wi-Fi Network

Simple steps to lock down your home router, keep strangers off your network, and protect every device in your house.

3 min read

Setting Up Two-Factor Authentication (2FA) on Any Account

Add a second layer of security to your most important accounts. This one change stops most account takeovers cold.

3 min read

Staying Safe on Social Media

How to protect your privacy on Facebook and Instagram, spot fake accounts, and avoid the most common social media traps.

3 min read