<?xml version='1.0' encoding='utf-8'?>
<section article="ghg" article_name="Health - General" number="4-302.5" title_number="4" title_name="Statistics and Records" subtitle_number="3" subtitle_name="Confidentiality of Medical Records">
  <level label="a">
    <text>Subject to subsection (d)(3)(ii) of this section, this section applies to disclosures of health information to recipients located in the State and outside the State.</text>
  </level>
  <level label="b">
    <text>Subject to subsection (d)(3)(ii) of this section, beginning December 1, 2023, a health information exchange or electronic health network may not disclose Mifepristone data or the diagnosis, procedure, medication, or related codes for abortion care and other sensitive health services as determined by the Secretary under subsection (d) of this section to a treating provider, a business entity, another health information exchange, or another electronic health network unless the disclosure is:</text>
    <level label="1">
      <text>For the adjudication of claims; or</text>
    </level>
    <level label="2">
      <text>To a specific treating provider at the written request of and with the consent of:</text>
      <level label="i">
        <text>A patient, for services for which the patient can provide consent under State law; or</text>
      </level>
      <level label="ii">
        <text>A parent or guardian of a patient, for services for which the parent or guardian can provide consent under State law.</text>
      </level>
    </level>
  </level>
  <level label="c">
    <level label="1">
      <text>Beginning June 1, 2024, a person who knowingly violates this section is guilty of a misdemeanor and on conviction is subject to a fine not to exceed $10,000 per day.</text>
    </level>
    <level label="2">
      <text>In determining the fine to be imposed under paragraph (1) of this subsection, the following factors shall be considered:</text>
      <level label="i">
        <text>The extent of actual or potential public harm caused by the violation;</text>
      </level>
      <level label="ii">
        <text>The cost of investigating the violation; and</text>
      </level>
      <level label="iii">
        <text>Whether the person previously violated this section.</text>
      </level>
    </level>
  </level>
  <level label="d">
    <level label="1">
      <text>The Secretary shall determine for abortion care and sensitive health services the procedure, diagnosis, medication, and other related codes that are subject to the restrictions on disclosure established under subsection (b) of this section due to a substantial risk to patients or health care providers that would result from disclosure.</text>
    </level>
    <level label="2">
      <text>A determination made under paragraph (1) of this subsection shall:</text>
      <level label="i">
        <text>Follow applicable guidelines of the American College of Obstetricians and Gynecologists, the World Health Organization, and the Society of Family Planning; and</text>
      </level>
      <level label="ii">
        <text>For sensitive health services, be based on the recommendations of the Protected Health Care Commission established under § 4–310 of this subtitle.</text>
      </level>
    </level>
    <level label="3">
      <level label="i">
        <text>The Secretary shall adopt regulations to restrict the disclosure of abortion care and other sensitive health services information by diagnosis, procedure, medication, or related codes under subsection (b) of this section.</text>
      </level>
      <level label="ii">
        <text>Except as provided in subparagraph (iii) of this paragraph, the Secretary may adopt restrictions on the disclosure of abortion care or other sensitive health services under subparagraph (i) of this paragraph that are applicable only to disclosures by health information exchanges or electronic health networks to out–of–state treating providers, out–of–state business entities, other health information exchanges, or other electronic health networks.</text>
      </level>
      <level label="iii">
        <text>Any regulations adopted by the Secretary to implement restrictions on the disclosure of Mifepristone data under subsection (b) of this section shall apply to disclosures of data to recipients located in the State and outside the State.</text>
      </level>
    </level>
  </level>
</section>
