How much follow-up work does a solo NP actually carry?
Nurse practitioners running an independent practice usually handle their own scheduling, billing, prescribing and follow-up, without a front desk team to absorb the routine messages. AANP's biennial Practice Report, built from its National NP Workforce Survey, tracks work settings, billing arrangements, prescribing patterns and patient volume for NPs across the country1. That data set exists specifically because those pieces of a solo practice, how many patients, what gets prescribed, how care is billed, are the ones that pile up fastest when there is no one else to route a phone call or a portal message.
AANP also now publishes a research snapshot on NP and student perspectives on AI in health care, which suggests automating routine tasks is already a live planning question for the profession rather than a future one1. Follow-up is a reasonable place to start, since most of it is repeatable and not, by itself, a clinical decision.
Which follow-ups are safe to automate?
Four follow-up types are largely repetitive and do not require a clinician's judgment at the moment they go out:
- Post-visit summary: a short recap of what was discussed and any instructions already given, sent within a day of the visit.
- Lab-results-ready notice: a message that results have arrived and are viewable in the portal, or that the patient should call, without stating the value.
- Refill due: a reminder tied to the days-supply on an existing prescription, prompting the patient to request a refill through the usual channel.
- Recall: a reminder that an annual visit, screening or vaccination is due, based on a date already in the chart.
A literature review of automated alerts and reminders aimed at patients found that text messaging was the most frequently studied technology and, across the studies reviewed, the one most often linked to a positive result, ahead of automated phone calls, for tasks like appointment attendance and medication adherence3. HHS guidance also says a provider should accommodate a patient's request to get appointment reminders by email rather than a postcard, when email is a reasonable way to reach that patient2.
Which follow-ups have to stay with a person?
Anything that involves interpreting a value, changing a dose or deciding what happens next belongs with a clinician, not a template. A study of how outpatient clinics manage electronic test result alerts found that even when abnormal results were delivered straight to a clinician's inbox, about 8% of abnormal imaging results and 7% of abnormal lab results still lacked timely follow-up at 30 days, and acknowledging an alert was not linked to actually following up on it4.
Providers in that study also said each alert took two to three minutes to handle and that many alerts felt unnecessary, which is a workload problem automation can make worse if it is not scoped carefully4. For a solo NP, the practical takeaway is this: automating the notice that a result exists is fine; automating what the result means, or what should happen next, is not. The same line applies to refill requests involving a new medication or dose change, and to recall messages tied to a concerning finding rather than a routine screening.
What can an automated message actually say under HIPAA?
HIPAA does not ban automated patient messages. The Privacy Rule sets standards for how protected health information can be used and disclosed by covered providers6, and the Security Rule requires administrative, physical and technical safeguards for any electronic PHI a practice sends or stores5. HHS guidance on patient email specifically notes that providers should take precautions such as confirming the email address before sending and meeting Security Rule requirements for the transmission itself2.
In practice, that means an automated lab-results-ready text can say results are in and ask the patient to log in or call, but should not state the value, the diagnosis or a dose change in the message body unless the channel is a secure, authenticated portal built for that. HHS also publishes topical fact sheets on permitted uses and disclosures worth checking before you finalize wording7. If you use SMS or email for these messages, review consent and opt-out language too; our guide to email and text consent for a health practice covers the CAN-SPAM, TCPA and HIPAA pieces of that. This is not legal advice; check the wording with your compliance adviser or attorney for your state.
How do you set this up without hiring anyone?
Start with one written rule: if the message would state a specific result, a diagnosis or a change to a prescription, a person sends it. If it is a status update or a due date, it can be templated.
| Follow-up type | Automate? | What the message can say |
|---|---|---|
| Post-visit summary | Yes | Recap of the visit and instructions already given |
| Lab results ready | Yes, notice only | "Results are in, please log in or call" (not the value) |
| Refill due, no change | Yes | Reminder to request refill through the usual channel |
| Recall or screening due | Yes | Reminder that a routine visit or screening is due |
| Abnormal result | No | Clinician calls or messages the patient personally |
| Dose change or new medication | No | Clinician handles the message directly |
- Pick a texting or portal platform willing to sign a business associate agreement, and confirm it before sending anything that touches PHI.
- Write one template per follow-up type above, and have your compliance adviser check the wording.
- Set a rule for who reviews an abnormal result or a refill that needs a clinical decision before any message goes out.
- Test the automated messages on a small batch of patients before turning them on for everyone.
Pick one follow-up type, write the template, and test it on a handful of patients before turning it loose on everyone else. If you are not sure whether your intake or booking messages already cross into content that needs a person, run our free credibility audit check first.