MQSA Patient Notification Requirements: The 30-Day and 7-Day Rules Explained

If your facility performs mammography, federal law tells you how quickly you must get results into patients’ hands and in what form. The Mammography Quality Standards Act (MQSA), as amended by the 2023 Final Rule (enforced beginning September 10, 2024), tightened those patient-communication rules. This guide explains the two timelines every facility has to hit, what the patient letter must contain, and where most facilities slip.

This article is general information, not legal advice. Always confirm against current FDA guidance and your state’s rules.

How fast must mammography results be sent to patients?

There are two clocks running, and they apply to different situations.

The 30-day rule (every patient). Facilities must provide each patient a written lay summary of her mammography results within 30 days of the examination. This applies to all results, including normal ones, not just abnormal findings. The lay summary is written in language a non-clinician can understand, separate from the technical report that goes to the referring provider.

The 7-day rule (suspicious or highly suggestive findings). When an exam is assessed as “Suspicious” or “Highly Suggestive of Malignancy,” the clock shortens dramatically. The medical report goes to the referring provider and the lay summary goes to the patient as soon as possible, but no later than 7 calendar days from the date the mammogram was interpreted. The intent is obvious: when the finding may be cancer, nobody waits a month.

There is also a rule for incomplete assessments. When an exam is read as “Incomplete: Need prior mammograms for comparison,” the facility must issue a follow-up report carrying a final overall assessment within 30 calendar days of the initial report, whether or not the prior images ever arrive.

What the patient lay summary must include

The Final Rule standardized the result categories patients see. Every lay summary must communicate the overall assessment in one of these terms: Negative, Benign, Probably Benign, Suspicious, Highly Suggestive of Malignancy, or one of the Incomplete categories. Using the same vocabulary across the report and the lay letter removes ambiguity for patients and providers.

As of the Final Rule, the lay summary and report must also include breast density information, a notification telling the patient whether her breast tissue is dense and what that means for detection and follow-up. (We cover the density requirement in depth in a separate guide.)

Where facilities most often fall short

The rules are clear; the operations are where things break.

The most common failure is simply turnaround time. Letters sit in a queue, get batched weekly, or wait on a staff member who’s out. A 30-day clock feels generous until a holiday week, a short-staffed front desk, and a printer outage stack up. The 7-day clock for suspicious findings has almost no slack at all.

The second is readability. The law requires lay language, and it matters more than compliance: research on screening-recall letters found that improving readability raised the share of patients who followed up within 60 days from roughly 90% to nearly 94%. A letter that’s technically compliant but confusing still loses patients.

The third is proof and recordkeeping: being able to show when a given patient was notified, for every patient, if the FDA inspector or a malpractice attorney ever asks.

How to stay inside the timelines without adding staff

A reliable patient-notification process has three properties: it’s fast (letters go out within a day or two of the result, not at the end of a weekly batch), it’s consistent (every patient, every category, same workflow), and it’s documented (a timestamped record of what was mailed and when).

Most facilities can’t hit all three by hand. That’s the case for automating the mailing: results, recall/callback, and density letters generated from your result data, mailed on a predictable schedule, with a record of each send.

PatientLetterHub was built for MQSA results, recall, and breast-density letters, formatted in lay language and mailed on time, with a record of every notification. See how it works.

Frequently asked questions

How many days does a facility have to notify a patient of mammogram results? Up to 30 days for routine results, but no more than 7 calendar days when the finding is Suspicious or Highly Suggestive of Malignancy.

Does the 30-day rule apply to normal results too? Yes. Every patient must receive a written lay summary within 30 days, regardless of the outcome.

When did the new MQSA notification rules take effect? Enforcement of the 2023 MQSA Final Rule began September 10, 2024.

What is a “lay summary”? A plain-language written summary of the patient’s mammography results, separate from the technical report sent to the referring physician.