Front Desk & Registration
Patient Access Guide

When a person presents to the facility requesting examination or treatment for an emergency condition, the process should immediately support clinical evaluation.

Front Desk staff should never independently decide:

• Whether the condition is an emergency
• Whether the patient should be treated
• Whether the patient can afford treatment
• Whether insurance is acceptable
• Whether the patient should leave
• Whether another facility would be cheaper
• Whether the patient should go elsewhere before clinical evaluation

Those determinations belong within the appropriate clinical process.

Texas requires Freestanding Emergency Medical Care Facilities to provide each patient, regardless of ability to pay, an appropriate medical screening, examination, stabilization, and necessary stabilizing treatment within facility capability.

EMTALA is designed to protect access to emergency medical care regardless of ability to pay.

CMS identifies three fundamental protections:

• Appropriate medical screening examination
• Stabilizing treatment when an emergency medical condition exists
• Appropriate transfer when necessary

Registration may occur simultaneously with clinical care when it does not interfere with or delay care.

Front Desk Rule

CMS allows emergency departments to ask about health insurance during registration as long as doing so does not delay examination or treatment.

Therefore, Front Desk staff may appropriately request:

• Insurance card
• Government identification
• Demographic information
• Responsible-party information

when the patient is medically able and the process does not interfere with care.

Never Say:

“Your insurance isn't accepted, so you need to go somewhere else.”

“Your copay must be paid before you can be seen.”

“We need your insurance authorization before the doctor evaluates you.”

“You don't have insurance, so you should go to urgent care.”

Such statements can create serious access-to-care and EMTALA risk.

Texas FSER regulations independently require emergency screening and stabilization without regard to ability to pay.

Registration processes should therefore clearly separate:

Clinical Access

from

Financial Processing

Financial discussions can occur appropriately, but not as a condition of receiving the required emergency evaluation and treatment.

Registration personnel should be trained to recognize that certain presentations require immediate clinical escalation.

Examples include:

• Chest pain
• Difficulty breathing
• Stroke symptoms
• Severe bleeding
• Altered mental status
• Seizure
• Unresponsiveness
• Severe allergic reaction
• Major trauma
• Severe abdominal pain
• Active labor
• Suicidal or dangerous behavior
• Pediatric respiratory distress

The Front Desk should immediately alert the clinical team according to facility policy.

If necessary:

Registration staff may ask basic intake questions needed to alert clinical personnel.

However, nonclinical registration staff should not make medical judgments such as:

• “That isn't an emergency.”
• “You can wait.”
• “You need urgent care instead.”
• “You probably don't need an ER.”
• “That doesn't sound serious.”

Clinical prioritization belongs to qualified clinical personnel.

Correct identification begins at registration.

Joint Commission emphasizes use of reliable patient identifiers to ensure the correct individual receives the correct service or treatment.

Acceptable patient-specific identifiers may include:

• Full legal name
• Date of birth
• Assigned medical-record number
• Telephone number
• Other approved patient-specific identifier

Room number or physical location should not be used as a unique patient identifier.

The registration process should prevent:

• Duplicate medical records
• Wrong-patient registration
• Similar-name confusion
• Identity merging
• Incorrect DOB
• Incorrect insurance attached to another patient

The facility should establish a consistent process using at least two identifiers before care, treatment, testing, or other services.

Front Desk personnel support this safety process by entering accurate patient information at the start.

For example:

Name + Date of Birth

or

Name + Medical Record Number

Joint Commission updated its two-identifier guidance in April 2026 and continues to emphasize reliable identification and matching the intended service to the correct individual.

Emergency care should not be delayed because the patient's identity cannot initially be established.

Examples include:

• Unconscious patient
• Trauma patient
• Altered mental status
• Patient without identification
• Patient unable to communicate

The facility should have a temporary identification process.

When identity is later confirmed, staff should follow the approved process to reconcile records without creating unsafe duplicate charts.

Front Desk personnel routinely handle Protected Health Information.

Examples include:

• Patient names
• Dates of birth
• Addresses
• Diagnoses
• Symptoms
• Insurance information
• Phone numbers
• Medical record numbers
• Financial information
• Visit information

HIPAA requires reasonable administrative, physical, and technical safeguards to protect PHI.

The Front Desk should be designed and operated to reduce unnecessary disclosure.

HIPAA generally requires covered entities to limit PHI use, access, requests, and disclosure to the minimum necessary for the intended purpose.

Front Desk staff should access only the information needed to perform their assigned responsibilities.

Role-based access should be established.

Examples:

Registration personnel may need access to:

• Demographics
• Insurance
• Prior registration information
• Contact information

They may not need unrestricted access to every clinical component of the medical record.

The minimum-necessary rule generally does not apply to provider-to-provider disclosures for treatment purposes.

Reasonable safeguards should reduce the likelihood that other patients or visitors overhear sensitive information.

Good practices include:

• Speaking quietly
• Avoiding announcement of diagnoses
• Positioning computer monitors away from public view
• Using privacy screens where appropriate
• Keeping printed registration documents face-down or secured
• Avoiding unattended PHI
• Securing workstations
• Logging out when leaving the desk

HIPAA does not require absolute soundproofing or the elimination of all incidental disclosures, but reasonable safeguards must be used.

Avoid conversations about a patient's:

• Diagnosis
• Insurance problem
• Financial situation
• Family conflict
• Pregnancy
• Mental health
• Substance use
• Test results
• Legal situation

within hearing distance of unrelated persons.

Move sensitive conversations to a more private location when practical.

Registration workstations often provide direct access to ePHI.

Front Desk staff should:

• Use their own credentials
• Never share passwords
• Lock screens when unattended
• Avoid writing passwords near computers
• Never permit unauthorized users to access the workstation
• Follow facility cybersecurity policies
• Report suspicious access promptly

HIPAA's Security Rule requires appropriate workforce authorization and access controls for ePHI.

Texas independently requires patient records to remain confidential and protected against:

• Loss
• Tampering
• Alteration
• Improper destruction
• Unauthorized disclosure
• Inadvertent disclosure

Each patient must have an individual medical record.

Registration information forms part of that record.

A family member does not automatically have unrestricted authority to receive patient information.

Staff should follow facility policy when determining whether:

• Patient permission exists
• The individual is a legally authorized representative
• The patient lacks capacity
• Disclosure is permitted for treatment involvement
• Disclosure is otherwise allowed by law

When uncertain:

Front Desk staff should not automatically confirm that a patient is receiving care.

Facility policy should define appropriate disclosure practices consistent with HIPAA and patient preferences.

For sensitive situations, staff should refer questions to the designated clinical or privacy process.

Police presence does not automatically authorize unrestricted disclosure of PHI.

Front Desk personnel should follow facility policy and involve:

• Administrator
• Privacy Officer
• Medical Records
• Clinical leadership

when law enforcement requests medical information.

Emergencies and legally required disclosures may be handled differently.

Front Desk employees should never independently provide patient information to:

• News media
• Reporters
• Employers
• Attorneys
• Investigators
• Members of the public

Requests should go through the facility's authorized privacy or leadership process.

Covered healthcare providers must provide patients with the HIPAA Notice of Privacy Practices as required.

Registration personnel should understand:

• How the notice is provided
• Where it is posted
• How acknowledgment is documented
• What to do if the patient refuses to sign acknowledgment

Refusal to sign acknowledgment should not result in denial of treatment.

Texas requires FSER patients to be treated with:

• Respect
• Consideration
• Dignity
• Appropriate privacy

Patients also have rights involving:

• Confidential records
• Information regarding care
• Participation in healthcare decisions
• Information about facility services
• Fees
• Payment policies
• Complaint processes

Front Desk staff are often responsible for helping communicate these rights.

Texas requires facilities to provide information concerning:

• Patient rights
• Patient responsibilities
• Services available
• Fees
• Payment policies
• Methods for submitting complaints or suggestions

Front Desk staff should know where this information is located and how to provide it.

Texas requires FSERs to post required notices regarding fees.

Registration personnel should ensure required notices remain:

• Posted
• Visible
• Current
• Unobstructed

Do not cover required signs with promotional materials, furniture, plants, or temporary notices.

Texas requires FSERs to provide patients or legally authorized representatives a written disclosure statement concerning facility fees and applicable health-benefit-plan information.

Registration staff should follow facility procedures concerning:

• Timing
• Delivery
• Documentation
• Signature or acknowledgment where applicable

However:

Texas restricts how FSERs may represent insurance-network participation.

A facility may not state that it “takes” or “accepts” an insurer or health plan unless it actually meets the statutory network-provider requirements.

Front Desk personnel should use approved scripts only when discussing insurance participation.

Never improvise.

A safer approach is to follow the organization's legal/compliance-approved wording.

Staff should distinguish between:

• Accepting insurance information for billing
• Being contracted/in-network
• Patient benefits
• Coverage
• Patient financial responsibility

Registration personnel generally should not guarantee:

• Coverage
• Reimbursement
• Network benefits
• Exact patient cost

unless the facility has authoritative information permitting that statement.

Staff should provide required disclosures and available information accurately.

Avoid giving unsupported estimates.

Appropriate language may explain that final charges can depend on:

• Services performed
• Diagnostics
• Physician services
• Insurance benefits
• Network status
• Patient-specific coverage

Financial information should never discourage or delay clinically necessary emergency evaluation.

Payment collection must be structured so it does not interfere with emergency access.

Do not condition:

• Medical screening
• Stabilization
• Immediate clinically necessary care

on payment.

When clinically appropriate and after required emergency-care obligations have been addressed, normal financial processes may continue according to policy.

Payment information should be handled securely.

Front Desk staff should avoid:

• Writing credit card numbers on unsecured paper
• Leaving payment information visible
• Sending card details through unauthorized systems
• Sharing financial information with unrelated parties

PCI-related processes should be followed where applicable.

Facilities should maintain policies governing consent.

Registration personnel may assist with administrative consent forms, but staff should understand that emergency treatment may involve different legal considerations when:

• Patient lacks capacity
• Patient is unconscious
• Delay would endanger health
• Legal representative is unavailable

Clinical and legal questions should be escalated.

Registration staff should not represent a general registration signature as equivalent to procedure-specific informed consent.

Informed consent for procedures belongs within the appropriate clinical process.

Registration personnel should understand facility procedures involving minors.

Issues may include:

• Parent/guardian identification
• Custody disputes
• Emergency treatment
• Consent authority
• Unaccompanied minors
• Confidential services
• Documentation

Emergency care should not be inappropriately delayed while administrative custody questions are resolved.

Escalate unusual situations to clinical leadership.

Front Desk staff should not attempt to interpret court orders independently.

When parents or guardians disagree regarding access or consent:

• Protect the patient
• Avoid unnecessary disclosure
• Obtain relevant documents if available
• Notify leadership
• Follow policy

Do not allow a family dispute to disrupt emergency care.

Patients with limited English proficiency should have meaningful access to communication.

Front Desk staff should know how to obtain approved interpreter services.

Do not routinely rely on:

• Children
• Untrained family members
• Other patients

to interpret sensitive healthcare information.

Document interpreter use according to policy.

Facilities should provide appropriate communication support for individuals with disabilities.

Examples include patients who are:

• Deaf
• Hard of hearing
• Blind
• Speech impaired
• Cognitively impaired

Registration staff should know how to access available auxiliary aids or interpreter services.

Front Desk staff should receive training regarding facility accessibility policies and legally protected service-animal access.

Staff should avoid making assumptions about disability.

Questions should be limited to what is legally and operationally appropriate.

A patient may refuse or be unable to provide demographic or insurance information.

Emergency evaluation should continue.

Staff should collect available information later when clinically appropriate.

Use temporary identifiers as necessary.

If a patient indicates intent to leave:

Registration personnel should not simply remove the patient from the tracking system.

The clinical team may need to:

• Assess the situation
• Explain risks
• Document departure
• Determine LWBS/AMA disposition

The exact classification should follow facility policy.

This situation is particularly sensitive.

Front Desk personnel should immediately notify clinical staff if a patient states:

“I can't afford this.”

“I don't have insurance.”

“I'll leave because it's too expensive.”

Do not encourage departure.

Clinical personnel should determine whether the patient has received the required screening/stabilization and address the medical risks of leaving.

Transfers are clinical processes requiring specific documentation and requirements.

Registration personnel may help with demographic and administrative documentation but should not:

• Select the receiving facility
• Explain clinical risks independently
• Obtain signatures without appropriate clinical explanation
• Arrange a clinically inappropriate transfer

Texas requires formal transfer policies and transfer documentation for licensed FSERs.

Texas requires continuity-of-care records to be transferred to the physician, practitioner, or facility to whom the patient is referred when applicable.

Front Desk personnel may assist with transmission but should follow approved:

• Privacy
• Security
• Verification
• Documentation

processes.

If the organization maintains a patient directory or discloses location information, staff should follow HIPAA and facility policy.

Patients may have privacy preferences that restrict disclosure.

Sensitive patients may require additional safeguards.

Front Desk staff may sometimes notice:

• Controlling companion
• Patient prevented from speaking
• Fearful behavior
• Inconsistent identification
• Visible injuries
• Threats
• Surveillance by another person

Registration personnel should not investigate independently.

Instead:

Texas FSER regulations require immediate reporting of suspected abuse, neglect, or exploitation to HHSC and other appropriate agencies as required.

Facilities must also prominently display required reporting information, including HHSC complaint/incident contact information.

Front Desk staff should know:

• What to report
• Who to notify internally
• That retaliation is prohibited
• Where the required notice is posted

Patients with behavioral-health emergencies should not be treated as security problems first.

If a person reports:

• Suicidal thoughts
• Homicidal thoughts
• Severe agitation
• Psychosis
• Dangerous behavior

immediately alert the clinical team.

Follow safety procedures while preserving dignity and privacy.

Front Desk staff should know how to activate:

• Security
• Clinical leadership
• Law enforcement when necessary
• Duress/panic systems

Staff safety is important, but an emergency patient still requires appropriate clinical consideration.

Follow facility policy for weapons.

Do not independently confront an armed person if doing so creates additional danger.

Use the approved security/emergency response process.

Texas requires patients to receive information about methods for expressing complaints and suggestions.

Front Desk personnel should:

• Listen professionally
• Avoid arguing
• Provide complaint information
• Notify the appropriate leader
• Document according to policy

Complaints involving clinical quality should be routed immediately to appropriate clinical leadership.

Patients should not experience negative treatment because they:

• Complain
• Ask questions
• Challenge a bill
• Request records
• Ask for privacy
• Request an interpreter
• Report a concern

Staff should maintain professional conduct regardless of disagreement.

Texas requires governing-body review of patient satisfaction with services and environment at least annually.

Registration quality can influence:

• Initial patient confidence
• Perceived waiting time
• Privacy
• Communication
• Understanding of fees
• Overall patient experience

Front Desk-related complaints should therefore be incorporated into quality review.

Emergency records must accurately capture patient arrival and care-process timing.

Front Desk systems should avoid artificial delays between:

The facility should have a process for documenting the true arrival time even when registration occurs afterward.

Every emergency patient should be accounted for.

The tracking system should accurately reflect disposition such as:

• Receiving care
• Discharged
• Transferred
• Admitted to observation where applicable
• Left without being seen
• Left against medical advice
• Eloped

Registration staff should not change clinical dispositions without appropriate authorization.

Duplicate medical records can cause:

• Medication errors
• Missed allergies
• Lost test results
• Incorrect billing
• Patient identification failures

Front Desk personnel should search carefully before creating a new medical-record number.

Potential duplicate records should be escalated to medical-record or health-information staff.

Registration data should be verified whenever practical.

Important fields include:

• Name
• DOB
• Address
• Phone
• Emergency contact
• Preferred language
• Insurance
• Guarantor

Incorrect demographics can interfere with:

• Follow-up
• Critical-result notification
• Claims
• Medical-record matching

An emergency contact listed in registration does not necessarily have legal authority to:

• Make healthcare decisions
• Obtain records
• Receive unrestricted PHI

Front Desk staff should understand the difference.

Patients asking for medical records should be directed through the facility's approved release-of-information process.

Do not provide records informally simply because a patient is standing at the desk.

Identity and authority should be appropriately verified.

Registration staff should not independently determine whether legal documents authorize release of medical information.

Route subpoenas, warrants, attorney requests, and similar documents through the approved legal/privacy process.

Facilities should maintain a policy addressing photography, video, and recording.

Consider:

• Patient privacy
• Other patients
• Staff privacy
• Clinical operations
• Security

Do not allow one patient's recording to expose another patient's PHI.

Do not call patients using unnecessary medical information.

Preferred:

“Mr. Smith?”

Avoid:

“Mr. Smith with chest pain?”

Do not display diagnoses on publicly visible tracking boards.

Registration paperwork containing PHI should be:

• Collected promptly
• Stored securely
• Shredded appropriately
• Never left unattended in public areas

Do not use open trash bins for documents containing PHI.

Printed or faxed PHI should not remain unattended.

Staff should confirm recipient information before transmission.

Misdirected records should be reported according to privacy incident policy.

Examples include:

• Wrong patient's paperwork given to another patient
• Insurance card copied into wrong chart
• Screen visible to visitor
• PHI emailed to wrong recipient
• Records faxed incorrectly
• Verbal disclosure to unauthorized person

Staff should report suspected incidents immediately.

Do not attempt to conceal or independently resolve a privacy breach.

Joint Commission ambulatory quality expectations support systems that promote:

• Patient rights
• Effective communication
• Correct patient identification
• Safe handoffs
• Confidentiality
• Informed participation in care
• Complaint management
• Patient safety

Front Desk operations should be incorporated into these organizational quality systems rather than treated solely as billing functions.

Registration staff routinely hand patients off to:

• Nursing
• EMT staff
• Clinical technicians
• Physicians
• Financial staff
• Medical records

Important information should be communicated clearly.

Examples:

• Patient in visible distress
• Language barrier
• Identity concern
• Safety concern
• Behavioral concern
• Family conflict
• Patient threatening to leave

A monthly Patient Access dashboard may include:

EMTALA / Access

• Patients reporting financial barriers
• Registration-related delays
• Patients redirected before MSE
• Cost-related departures

Patient Identification

• Duplicate MRNs
• Wrong-patient registrations
• Demographic corrections
• Insurance attached to wrong chart

Privacy

• HIPAA incidents
• Misrouted documents
• Unauthorized disclosures
• Screen/privacy findings

Patient Experience

• Registration complaints
• Privacy complaints
• Financial disclosure complaints
• Interpreter complaints

Training

• EMTALA training compliance
• HIPAA training compliance
• Patient-rights competency
• Registration competency

The facility Quality/QAPI Committee should periodically evaluate registration processes.

Ask:

EMTALA

Did any administrative process delay clinical screening?

Privacy

Were there PHI incidents or inappropriate disclosures?

Identification

Were wrong-patient or duplicate-record events identified?

Financial Disclosures

Were required Texas notices and disclosures provided correctly?

Patient Rights

Were complaints handled appropriately?

Communication

Were language and disability needs addressed?

Safety

Were behavioral or security concerns escalated correctly?

Training

Are Front Desk personnel current on required competencies?

Use:

Example:

Finding: Two patients reported being asked for payment before triage.

Risk: Potential delay or perception of delay in emergency screening.

Immediate Action: Suspend upfront collection before clinical clearance.

Root Cause: New staff misunderstood registration workflow.

Corrective Action: EMTALA registration training + revised scripting.

Measure: 30-day audit of 50 registrations.

Outcome: Zero payment requests before clinical intake.

Status: Effectiveness Verified / Closed.

Section 1 — Policies

• Registration policy
• EMTALA/access policy
• HIPAA/privacy policy
• Patient identification
• Insurance scripting
• Fee disclosures
• Consent
• Interpreter services
• Complaints
• Behavioral/security escalation

Section 2 — Training

• EMTALA training
• HIPAA training
• Patient-rights training
• Patient-identification training
• Financial-disclosure training
• Security training

Section 3 — Required Postings

• Patient rights
• Complaint information
• Abuse/neglect reporting
• Required FSER notices
• Fee notice
• Privacy notice

Section 4 — Quality

• Registration audits
• Duplicate-record reports
• Privacy incidents
• Complaints
• Corrective actions

Section 5 — Scripts

• Insurance
• Network status
• Payment questions
• Cost questions
• Interpreter access
• Complaint response

Quick Front Desk Rule

Never Let Administration Delay Emergency Care

When uncertain:

Register Later — Escalate Now — Protect the Patient