"Separate med-spa marketing contacts from clinical records"
"Source","https://bluefinchadvisors.com/blog/separate-med-spa-marketing-contacts-from-clinical-records"
"Basis","User-entered planning records. Filled fields do not establish completion, approval or compliance."

"Proposed generic field name","Business purpose","Proposed destination and access question","Source-review status","Qualified review evidence reference","Review owner","Internal review date","Next evidence action","Missing required fields"
"Preferred marketing channel","Review campaign contact route","Proposed nonclinical CRM / staff access review","Reviewed in source","Field-review-reference-17","Privacy-review-role","2026-10-18","Inspect the recorded purpose and destination review","None"
"Free-text intake notes","Proposed consultation handoff","Content and destination scope unresolved","Reviewed in source","","System-review-role","2026-10-19","Obtain qualified evidence before describing the field as reviewed","Qualified review evidence reference"

"Use this worksheet"
"Fictional examples. Enter generic field names and internal task references, not personal or clinical information."
"Filled fields need qualified source review and establish no privacy clearance, consent or approval."
"No message, data transfer, clinical decision or website change occurs."
"Reload clears edits. Download only to approved business storage."

"Sources"
"HHS: Privacy Rule scope, covered entities and business associates","https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html"
"HHS: Marketing uses of protected health information and exceptions","https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/marketing/index.html"
"HubSpot: Task owners, due dates and associated records","https://knowledge.hubspot.com/tasks/create-tasks"
"BlueFinch: Account setup support, not legal or medical advice","https://bluefinchadvisors.com/toolbox/dedicated-advisor"