Providers Manage Complex Record Sharing Opt-Outs
Healthcare providers must handle individual patient data opt-out requests due to the lack of a universal network setting.
Updated on Oct. 15, 2026 in Healthcare
Live Poll
Do you feel confident in your ability to control who can access your electronic medical records?
Patients are automatically enrolled in Epic Care Everywhere, a system that facilitates the exchange of roughly 22 million records daily. Opting out requires manual, individual requests to each separate healthcare provider, as there is no universal "off" switch for the network.
Why it matters
Healthcare operators must manage patient data access requests that vary significantly by provider and network. Because opt-out processes are not uniform, administrative teams face potential operational friction when patients seek to restrict data sharing for privacy.
Epic manages 305 million patient charts, with 22 million records exchanged daily across its Care Everywhere network. Since August 2025, only 112 individuals have successfully opted out of the system entirely.
The players
Epic
A dominant provider of electronic health record software systems used by large-scale healthcare organizations.
CliniSync
An Ohio-based health information exchange that coordinates data sharing across regional medical providers.
The details
Epic requires patients to navigate specific MyChart settings or contact medical records departments at each individual facility to revoke data-sharing authorization. While some networks like CliniSync provide a singular opt-out mechanism for their regional participants, they often mandate notarized forms. This decentralized structure complicates compliance for medical staff who must manage inconsistent authorization statuses across their patient base.
Timeline
April 2024: CalMatters acquired The Markup.
August 2025: Epic introduced the network opt-out option.
October 15, 2026: Investigation regarding record exchange privacy was published.
Market Landscape
The current data-sharing model exists in a climate where 10% of 1,138 studied breach cases involved staff transferring information to personal accounts. This highlights the security risks inherent in large-scale health information exchange systems.
Operators should review their specific patient opt-out workflows to ensure they align with local requirements and software capabilities. Staff should be prepared to handle disparate documentation requests, as administrative burdens vary by provider network.
The takeaway
The lack of a universal opt-out mechanism means that provider-specific administrative policies define the patient experience. Practice managers should verify whether their current software version supports self-service opt-outs to reduce the manual burden on medical records staff.
Further reading
For broader context on current industry data management standards, visit Healthcare.
Live Poll
Do you feel confident in your ability to control who can access your electronic medical records?
