There is no national patient identifier in the United States. Every hospital, clinic, laboratory, and pharmacy assigns you its own number and then tries to figure out, each time you show up or each time a record arrives from somewhere else, whether you are the same person as the one already in its files. Most of the time it works. When it fails, your record can end up with a stranger's allergy list, your lab result can land in someone else's chart, or your history can be split across two files so a clinician sees only half of it. This guide explains how matching works, why it fails, and what you can do to protect your own record.
How you are identified in a health system
When you register, the organization creates a medical record number (often shortened to MRN) and stores your identifying details alongside it: full name, date of birth, sex, address, phone, and sometimes an email, a driver's license number, or the last four digits of a Social Security number. Health systems with many facilities keep a master patient index that links your MRNs across locations into one enterprise identity.
Matching happens whenever a new record needs to be attached to a person. Registration staff search by name and date of birth; laboratory results arrive with a name, date of birth, and ordering number; documents from another provider arrive with whatever that provider recorded. The system compares the incoming details to what it has, using either exact rules (name, date of birth, and sex must all match) or probabilistic scoring that tolerates small differences and assigns a confidence level. High-confidence matches link automatically; low-confidence ones go to a work queue for a person to review; non-matches create a new record.
What goes wrong: duplicates and overlays
Two errors mirror each other.
- A duplicate is when one person has two or more records in the same system. It happens when a registrar misspells a name, a patient gives a nickname or a maiden name, a date of birth is typed wrong, or a match is missed because an address changed. Your allergy list, medications, and history are then split, and a clinician looking at one record does not see the other.
- An overlay is when two different people are merged into one record. It happens when a system or a person decides two records are the same and they are not: two patients with the same name and date of birth, twins, a parent and child with the same name, or a mistaken manual merge. One patient's data is then mixed into another's chart.
Overlays are rarer and more dangerous, because a clinician may act on information that belongs to someone else. Duplicates are common; health systems routinely report duplicate rates of several percent even after cleanup efforts.
Who is most at risk: people with common names, people whose names have multiple spellings or transliterations, twins and family members who share a name, people who have changed their name, and anyone whose date of birth or address was entered incorrectly at some point.
Why it matters to you
Matching errors cause real harm. A missed allergy or a medication from the wrong chart can lead to a dangerous prescription. A lab result filed to the wrong person delays diagnosis for the person it belonged to and may prompt unneeded treatment for the person who received it. Duplicate records cause repeated tests and confused billing. And because records now move between organizations electronically, an error in one system can propagate to others through health information exchange before anyone notices.
There is also a privacy dimension. An overlay means someone else's health information is in your record, and yours may be in theirs. Under the HIPAA Privacy Rule you have a right to see what is in your record and to request correction of errors, and those rights are the practical tools for addressing a mix-up.
Matching across organizations
When your records travel between a hospital, your primary care office, a specialist, and a health information exchange, each receiving system re-does the matching with whatever demographic details came along. Standards-based exchange using HL7 FHIR carries a patient resource with identifiers and demographics, and exchange networks maintain their own record locator services that link your identities across participants. National efforts have focused on improving the consistency of the data used for matching, for example standardizing how addresses are formatted, because small variations in demographics are the leading cause of missed matches. The federal health IT office has published guidance and research on patient matching, and improving match rates remains a stated policy goal.
Some health systems and exchanges now use additional signals such as a verified mobile phone number or email address, and a few offer patients a way to confirm their identity through a portal or app so that the link is established by the patient rather than inferred.
How to check your own record
- Log in to each patient portal you have and review the demographics page. Confirm your legal name, date of birth, address, and phone are correct and consistent across portals.
- Review your medication, allergy, and problem lists. Anything you do not recognize is a possible overlay.
- Look at visit history and test results. A visit you did not have, or a result for a test you never took, is a strong signal.
- If you have ever registered under a different name (maiden name, nickname, a different spelling), tell the registration desk so they can look for a duplicate.
- When you register anywhere new, give your full legal name as it appears on your identification and confirm the date of birth the registrar reads back to you.
Fixing a mix-up
Start with the health information management or medical records department of the organization, not the front desk. Tell them what you found and ask for a review. For a suspected overlay, they will need to determine which data belongs to whom, which can take time because they must protect the other patient's privacy too; you will not be shown the other person's information, but the foreign data should be removed from your record. For a suspected duplicate, ask them to merge the records after verifying both are yours.
If the organization disputes that there is an error, you can submit a formal request to amend your record under HIPAA. The organization must act on the request within 60 days (with one 30-day extension) and, if it denies the request, must tell you why in writing and let you file a statement of disagreement that stays with your record. Keep copies of everything. If an overlay was caused by a data exchange from another organization, ask the fixing organization to notify the source so the error is corrected there as well, since otherwise it may come back.
Common questions
Why doesn't the United States have a national patient identifier?
Federal law authorized one in 1996, but Congress has prohibited spending federal funds to develop it every year since 1999, citing privacy concerns. Matching therefore relies on demographic data and, increasingly, on standardized formats and patient-verified contact information.
How would I know if someone else's information is in my record?
Review your portal for medications, allergies, diagnoses, visits, or results you do not recognize. Also watch for bills or explanations of benefits for services you did not receive, which can indicate an overlay or identity confusion.
Can I ask a hospital to delete another person's data from my chart?
Yes. Report it to the medical records department as a suspected overlay. They must investigate and remove data that does not belong to you. If they dispute it, you can file a formal amendment request under HIPAA and, if denied, a statement of disagreement.
Does providing my Social Security number improve matching?
Some systems use the last four digits as an additional matching field, but you are generally not required to provide it, and many organizations no longer request it. Accurate legal name, date of birth, address, and a verified phone or email do more for matching than a Social Security number.