How is consent for release of information logged in Phreesia?

• A. Consent is emailed to patient
• B. Consent captured via a form, stored with a timestamp, attached to patient record, auditable by user and action
• C. Consent stored as a simple note with no timestamp
• D. Consent is not stored

Answer: (B)

Consent for release of information is logged by capturing it on a dedicated consent form, storing it with a timestamp, and attaching it to the patient’s record so it becomes an auditable part of the chart. This creates a clear, verifiable trail showing who captured the consent and when, which action was approved, and under what date. The timestamp and the attached record ensure accountability and compliance, making it easy to review during any information release.

If consent were just written as a simple note with no timestamp, there would be no reliable evidence of when consent was given or who recorded it, which undermines traceability. Not storing consent at all would leave no record to verify authorization. Emailing consent copies could scatter the information outside the central patient record, reducing auditability and increasing the risk of misplacement or loss.