Whatever the reason, requests for patient data can cause concern. Whilst the reason might be legitimate, it is the practice that becomes liable in the case of any unlawful data breach. There is a golden rule. If you are not sure, do not disclose patient data. Always clarify the circumstances first.