jill opens a letter from blue cross/blue shield requesting copies of an individual's discharge summary and pathology report in order to review for a specifically identified claim filed for the patient. No patient authorization is attached.
Is this action correct? Jill sends back a letter informing bcbs that the hospital cannot release any patient information without first having a properly executed patient authorization?