Protecting patient privacy is the cornerstone of good medical care. As healthcare becomes increasingly digital, patients often wonder how their information is stored, who can see it and what safeguards exist behind the scenes. Epic has built many advanced features to ensure that sensitive information stays secure while still allowing clinicians to deliver coordinated, high‑quality care. 

“Patients place immense trust in us when they share personal details about their health,” SCRMC family medicine physician Hannah Ramsey, DO, said. “Epic has many features meant to protect that information, which hopefully puts patients at ease.”  

Epic offers the following enhanced privacy and protection features:  

Role‑Based Access So Only the Right People See the Right Information 

Epic uses “role‑based access controls,” meaning staff can only view the parts of the chart necessary for their specific job. This “need‑to‑know” structure helps ensure that sensitive information is limited to those who require it for patient care. 

Confidential Notes and Restricted Documentation 

Epic allows clinicians to document certain information in “confidential notes” or “restricted sections” that are not visible to all users.  

This is especially important for: 

• Adolescent visits 

• Reproductive health counseling 

• Domestic violence screening 

• Substance‑use discussions 

These tools help clinicians protect patient privacy while still maintaining accurate medical records. 

MyChart Privacy Controls for Patients 

Epic’s patient portal, MyChart, gives patients more control than ever over their own information.  

Patients can: 

• Review MyChart Proxy access to their records  

• Manage proxy access  

• Examples: parents, caregivers and partners 

• Control notifications and communication preferences 

For adolescents, MyChart can be configured to protect confidential services while still allowing parents to support their child’s care. 

Compliance With Federal and State Privacy Laws 

Epic is designed to support compliance with: 

• HIPAA 

• Substance Use Confidentiality Regulations 

• State‑specific privacy laws, including those protecting reproductive health and mental health records 

“Adhering to all federal and state health care regulations remains a top priority for our organization,” SCRMC’s General Counsel and Compliance Officer, Lane Staines, said. “Epic’s enhanced features help us ensure that privacy protections are strong and legally aligned.” 

Secure Data Exchange for Coordinated Care 

When information is shared between health care organizations, such as during referrals or hospitalizations, Epic uses secure, encrypted channels. Patients can also opt in or out of certain types of data sharing, depending on local policies. 

This balance allows clinicians to access the information they need while giving patients a voice in how their data moves across systems. 

How Patients Can Help Protect Their Own Information 

Patients can enhance their own privacy by: 

• Reviewing proxy access in MyChart 

• Using strong passwords and two‑factor authentication 

• Asking their care team how sensitive information will be documented 

Epic’s privacy and confidentiality features are exceptionally robust, offering multiple layers of protection to safeguard patient information and support coordinated care. 

“Our organization places tremendous trust in the Epic system,” SCRMC’s Hospital Privacy Officer, Lori Kennedy said. “Epic’s comprehensive privacy safeguards allow us to uphold the highest standards of confidentiality while empowering our teams to continue delivering exceptional care.” 

 South Central and its consortium partners will officially Go-Live with Epic on January 31, 2026, marking the beginning of a new era in patient care and operational excellence.