<?xml version='1.0' encoding='utf-8'?>
<section article="ghg" article_name="Health - General" number="4-303" title_number="4" title_name="Statistics and Records" subtitle_number="3" subtitle_name="Confidentiality of Medical Records">
  <level label="a">
    <text>A health care provider shall disclose a medical record on the authorization of a person in interest in accordance with this section.</text>
  </level>
  <level label="b">
    <text>Except as otherwise provided in subsections (c) and (d) of this section, an authorization shall:</text>
    <level label="1">
      <text>Be in writing, dated, and signed by the person in interest;</text>
    </level>
    <level label="2">
      <text>State the name of the health care provider;</text>
    </level>
    <level label="3">
      <text>Identify to whom the information is to be disclosed;</text>
    </level>
    <level label="4">
      <text>State the period of time that the authorization is valid, which may not exceed 1 year, except:</text>
      <level label="i">
        <text>In cases of criminal justice referrals, in which case the authorization shall be valid until 30 days following final disposition; or</text>
      </level>
      <level label="ii">
        <text>In cases where the patient on whom the medical record is kept is a resident of a nursing home, in which case the authorization shall be valid until revoked, or for any time period specified in the authorization; and</text>
      </level>
    </level>
    <level label="5">
      <text>Apply only to a medical record developed by the health care provider unless in writing:</text>
      <level label="i">
        <text>The authorization specifies disclosure of a medical record that the health care provider has received from another provider; and</text>
      </level>
      <level label="ii">
        <text>The other provider has not prohibited redisclosure.</text>
      </level>
    </level>
  </level>
  <level label="c">
    <text>A health care provider shall disclose a medical record on receipt of a preauthorized form that is part of an application for insurance.</text>
  </level>
  <level label="d">
    <text>A health care provider shall disclose a medical record on receipt of an authorization for the release of relevant medical information that is included with the claim application form filed with the Workers’ Compensation Commission in accordance with § 9–709(a), § 9–710(b), or § 9–711(a) of the Labor and Employment Article.</text>
  </level>
  <level label="e">
    <level label="1">
      <text>Except in cases of criminal justice referrals, a person in interest may revoke an authorization in writing.</text>
    </level>
    <level label="2">
      <text>A revocation of an authorization becomes effective on the date of receipt by the health care provider.</text>
    </level>
    <level label="3">
      <text>A disclosure made before the effective date of a revocation is not affected by the revocation.</text>
    </level>
  </level>
  <level label="f">
    <text>A copy of the following shall be entered in the medical record of a patient or recipient:</text>
    <level label="1">
      <text>A written authorization;</text>
    </level>
    <level label="2">
      <text>Any action taken in response to an authorization; and</text>
    </level>
    <level label="3">
      <text>Any revocation of an authorization.</text>
    </level>
  </level>
</section>
