Confidentiality of Genetic Test Results

Legal and Regulatory Framework

The Centers for Disease Control and Prevention recommends that providers refuse to disclose a patient's BRCA test results to the associated person without the patient's explicit authorization, as genetic test results are confidential patient information protected by CLIA and HIPAA regulations 1, 2, 3
CLIA regulations mandate that laboratories and providers ensure confidentiality of patient information throughout all phases of genetic testing, and test results may only be released to authorized persons 1, 2, 3
The HIPAA Privacy Rule requires patient authorization before disclosing protected health information to third parties, even family members 1, 2, 3

When an associated person requests a patient's BRCA results, the provider should immediately refuse the request without providing any information about whether testing occurred or results exist, and explain that genetic test results are confidential patient information that cannot be disclosed without the patient's written authorization 1, 2, 3
The provider should direct the associated person to speak directly with the patient about obtaining results, and document the request and refusal in the medical record 1, 2

The American Society of Clinical Oncology guidelines emphasize the importance of sharing genetic test results with at-risk relatives, but this remains the patient's decision 5, 6
The provider's role is to educate the patient about the importance of family communication, not to bypass the patient's confidentiality 4, 5, 6

The provider should provide the patient with resources about how to communicate genetic results to family members, and offer genetic counseling support to help the patient navigate family disclosure decisions 4, 5, 6
The provider should explain that family members can pursue their own independent genetic testing or counseling, and document the patient's decision regarding family disclosure in the medical record 1, 2, 4, 5, 6