<?xml version='1.0' encoding='utf-8'?>
<section article="ghg" article_name="Health - General" number="4-302.3" future_version_removed="true" title_number="4" title_name="Statistics and Records" subtitle_number="3" subtitle_name="Confidentiality of Medical Records">
  <level label="a">
    <level label="1">
      <text>In this section the following words have the meanings indicated.</text>
    </level>
    <level label="2">
      <text>“Electronic health care transactions” means health care transactions that have been approved by a nationally recognized health care standards development organization to support health care informatics, information exchange, systems integration, and other health care applications.</text>
    </level>
    <level label="3">
      <text>“Electronic health network” means an entity:</text>
      <level label="i">
        <text>Involved in the exchange of electronic health care transactions between a payor, health care provider, vendor, and any other entity; and</text>
      </level>
      <level label="ii">
        <text>Certified by the Maryland Health Care Commission.</text>
      </level>
    </level>
    <level label="4">
      <text>“Nursing home” has the meaning stated in § 19–1401 of this article.</text>
    </level>
    <level label="5">
      <text>“Standard request” means a request for clinical information from a health information exchange that conforms to the major standards version specified by the Office of the National Coordinator for Health Information Technology.</text>
    </level>
  </level>
  <level label="b">
    <text>This section applies to:</text>
    <level label="1">
      <text>Except for the State–designated health information exchange, a health information exchange operating in the State; and</text>
    </level>
    <level label="2">
      <text>A payor that:</text>
      <level label="i">
        <text>Holds a valid certificate of authority issued by the Maryland Insurance Commissioner; and</text>
      </level>
      <level label="ii">
        <text>Acts as, operates, or owns a health information exchange.</text>
      </level>
    </level>
  </level>
  <level label="c">
    <text>An entity to which this section applies shall connect to the State–designated health information exchange in a manner consistent with applicable federal and State privacy laws.</text>
  </level>
  <level label="d">
    <text>When a standard request for clinical information is received through the State–designated health information exchange, an entity to which this section applies shall:</text>
    <level label="1">
      <text>Respond to the request to the extent authorized under federal and State privacy laws; and</text>
    </level>
    <level label="2">
      <text>Transmit the response to the State–designated health information exchange in the manner specified in the regulations adopted under subsection (g) of this section.</text>
    </level>
  </level>
  <level label="e">
    <text>A consent from a patient to release clinical information to a provider obtained by an entity to which this section applies shall apply to information transmitted through the State–designated health information exchange or by other means.</text>
  </level>
  <level label="f">
    <level label="1">
      <text>On request of the Department, a nursing home shall submit electronically clinical information to the State–designated health information exchange to facilitate the objectives stated in paragraph (3) of this subsection.</text>
    </level>
    <level label="2">
      <text>In accordance with State and federal law and to facilitate the objectives stated in paragraph (3) of this subsection, the State–designated health information exchange may provide the information submitted under paragraph (1) of this subsection to:</text>
      <level label="i">
        <text>A health care provider;</text>
      </level>
      <level label="ii">
        <text>An authorized health information exchange user;</text>
      </level>
      <level label="iii">
        <text>A health information exchange authorized by the Maryland Health Care Commission;</text>
      </level>
      <level label="iv">
        <text>A federal official; and</text>
      </level>
      <level label="v">
        <text>A State official.</text>
      </level>
    </level>
    <level label="3">
      <level label="i">
        <text>If approved by the Maryland Health Care Commission, the information submitted under paragraph (1) of this subsection may be combined with other data maintained by the State–designated health information exchange to facilitate:</text>
        <level label="1">
          <text>A State health improvement program;</text>
        </level>
        <level label="2">
          <text>Mitigation of a public health emergency;</text>
        </level>
        <level label="3">
          <text>Improvement of patient safety; and</text>
        </level>
        <level label="4">
          <text>The participation of the State in the Center for Medicare and Medicaid Innovation’s States Advancing All–Payer Health Equity Approaches and Development (AHEAD) Model and any successor models.</text>
        </level>
      </level>
      <level label="ii">
        <text>The information submitted by a nursing home under paragraph (1) of this subsection may be used only to facilitate the objectives stated in subparagraph (i) of this paragraph and may not be used for any other purpose, including licensing and certification.</text>
      </level>
    </level>
  </level>
  <level label="g">
    <level label="1">
      <text>The State–designated health information exchange shall:</text>
      <level label="i">
        <text>Participate in the advisory committee established under § 13–4306(a)(1) of this article; and</text>
      </level>
      <level label="ii">
        <text>Maintain a data set for the Maryland Commission on Health Equity and provide data from the data set consistent with the parameters defined by the advisory committee.</text>
      </level>
    </level>
    <level label="2">
      <text>If approved by the Maryland Commission on Health Equity, the State–designated health information exchange may use the data set maintained under paragraph (1) of this subsection to improve health outcomes for patients.</text>
    </level>
  </level>
  <level label="h">
    <level label="1">
      <text>An electronic health network shall provide electronic health care transactions to the State–designated health information exchange for the following public health and clinical purposes:</text>
      <level label="i">
        <text>A State health improvement program;</text>
      </level>
      <level label="ii">
        <text>Mitigation of a public health emergency;</text>
      </level>
      <level label="iii">
        <text>Improvement of patient safety; and</text>
      </level>
      <level label="iv">
        <text>The participation of the State in the Center for Medicare and Medicaid Innovation’s States Advancing All–Payer Health Equity Approaches and Development (AHEAD) Model and any successor models.</text>
      </level>
    </level>
    <level label="2">
      <text>An electronic health network may not charge a fee to a health care provider, health care payor, or to the State–designated health information exchange for providing the information as required under paragraph (1) of this subsection.</text>
    </level>
    <level label="3">
      <text>The State–designated health information exchange shall develop and implement policies and procedures to implement paragraph (1) of this subsection that are consistent with regulations adopted by the Maryland Health Care Commission.</text>
    </level>
  </level>
  <level label="i">
    <text>The Maryland Health Care Commission:</text>
    <level label="1">
      <text>Shall adopt regulations for implementing the connectivity to the State–designated health information exchange required under this section; and</text>
    </level>
    <level label="2">
      <text>Shall seek, through any regulations adopted under item (1) of this subsection, to promote technology standards and formats that conform to those specified by the Office of the National Coordinator for Health Information Technology.</text>
    </level>
  </level>
  <level label="j">
    <level label="1">
      <text>The Maryland Health Care Commission shall adopt regulations that:</text>
      <level label="i">
        <text>Specify the scope of clinical information to be exchanged or sent under this section; and</text>
      </level>
      <level label="ii">
        <text>Provide for a uniform, gradual implementation of the exchange of clinical information under this section.</text>
      </level>
    </level>
    <level label="2">
      <text>Any regulations adopted under paragraph (1) of this subsection shall limit the scope of the clinical information to purposes that:</text>
      <level label="i">
        <text>Improve treatment, including improved access to clinical records by treating clinicians;</text>
      </level>
      <level label="ii">
        <text>Promote uses of the State–designated health information exchange important to public health; or</text>
      </level>
      <level label="iii">
        <text>The protection of the electronic health information of a person in interest who has opted out of having electronic health information shared or disclosed by a health information exchange.</text>
      </level>
    </level>
    <level label="3">
      <text>Regulations adopted under paragraph (1) of this subsection:</text>
      <level label="i">
        <text>Shall limit redisclosure of financial information, including billed or paid amounts available in electronic claims transactions;</text>
      </level>
      <level label="ii">
        <text>May not restrict the State’s use of financial information, including billed or paid amounts available in electronic claims transactions, for public health purposes related to the participation of the State in the Center for Medicare and Medicaid Innovation’s States Advancing All–Payer Health Equity Approaches and Development (AHEAD) Model and any successor models;</text>
      </level>
      <level label="iii">
        <text>Shall restrict data of patients who have opted out of records sharing through the State–designated health information exchange or a health information exchange authorized by the Maryland Health Care Commission;</text>
      </level>
      <level label="iv">
        <text>Shall restrict data from health care providers that possess sensitive health care information; and</text>
      </level>
      <level label="v">
        <text>Shall restrict data of patients who have obtained legally protected health care.</text>
      </level>
    </level>
  </level>
  <level label="k">
    <text>This section does not:</text>
    <level label="1">
      <text>Require an entity to which this section applies to collect clinical information or obtain any authorizations, not otherwise required by federal or State law, relating to information to be sent or received through the State–designated health information exchange;</text>
    </level>
    <level label="2">
      <text>Prohibit an entity to which this section applies from directly receiving or sending information to providers or subscribers outside of the State–designated health information exchange; or</text>
    </level>
    <level label="3">
      <text>Prohibit an entity to which this section applies from connecting and interoperating with the State–designated health information exchange in a manner and scope beyond that required under this section.</text>
    </level>
  </level>
</section>
