<?xml version='1.0' encoding='utf-8'?>
<chapter num="07" heading="Confidentiality of Records" title_num="07" subtitle_num="01">
  <regulation prefix="Regulation" num=".01" heading="Scope.">
    <paragraph num="A.">
      <text>With the exception of child protective services records, this chapter governs confidentiality of records and information of the Department of Human Services and local departments. COMAR 07.02.07 governs the confidentiality of child protective services records.</text>
    </paragraph>
    <paragraph num="B.">
      <text>If this chapter conflicts with any other applicable State or federal regulation or law, the provision which more strictly protects confidentiality of records applies.</text>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".02" heading="Definitions.">
    <paragraph num="A.">
      <text>In this chapter, the following terms have the meanings indicated.</text>
    </paragraph>
    <paragraph num="B.">
      <text>Terms Defined.</text>
      <paragraph num="(1)">
        <text>“Act” means the Public Information Act, State Government Article, §10-611 et seq., Annotated Code of Maryland.</text>
      </paragraph>
      <paragraph num="(2)">
        <text>“Administration” means any of the following administrations within the Department of Human Services:</text>
        <paragraph num="(a)">
          <text>Social Services Administration;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Family Investment Administration;</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Child Support Administration.</text>
        </paragraph>
      </paragraph>
      <paragraph num="(3)">
        <text>“Custodian” means an authorized employee of the Department, an administration, or a local department having actual control and custody of a record.</text>
      </paragraph>
      <paragraph num="(4)">
        <text>“Department” means the Department of Human Services, its administrations, and the local departments.</text>
      </paragraph>
      <paragraph num="(5)">
        <text>“Fugitive felon” means an individual who:</text>
        <paragraph num="(a)">
          <text>Is fleeing to avoid prosecution, or custody or confinement after conviction, for a crime or an attempt to commit a crime that, under the law of the place the individual is fleeing, is a felony; or</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Is in violation of a condition of probation or parole.</text>
        </paragraph>
      </paragraph>
      <paragraph num="(6)">
        <text>“Information” means any part of a record, in any form.</text>
      </paragraph>
      <paragraph num="(7)">
        <text>License.</text>
        <paragraph num="(a)">
          <text>“License” means formal written permission required by law to:</text>
          <paragraph num="(i)">
            <text>Perform an act or provide a service; and</text>
          </paragraph>
          <paragraph num="(ii)">
            <text>Be obtained from the Department.</text>
          </paragraph>
        </paragraph>
        <paragraph num="(b)">
          <text>“License” includes terms used for similar forms including “registration”.</text>
        </paragraph>
      </paragraph>
      <paragraph num="(8)">
        <text>“Local department” means the local department of social services in a county or Baltimore City, and the Montgomery County Department of Health and Human Services.</text>
      </paragraph>
      <paragraph num="(9)">
        <text>“Official custodian” means the executive head of the Department, administration, or local department in which a record is located.</text>
      </paragraph>
      <paragraph num="(10)">
        <text>“Record” means the original or any copy of documentary material, in any form that, in the transaction of public business, is made by, received by, or received from:</text>
        <paragraph num="(a)">
          <text>The State;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Any county or city of the State; or</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Any subdivision or agency of the State, or a county or city.</text>
        </paragraph>
      </paragraph>
      <paragraph num="(11)">
        <text>“Requestor” means a person requesting disclosure of or access to a record.</text>
      </paragraph>
      <paragraph num="(12)">
        <text>“State” means the State of Maryland.</text>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".03" heading="General Right to Information.">
    <text>Except as prohibited by federal or State law, including this chapter, a custodian shall grant the proper request of a person for access to any record of the Department if provisions are made for the protection of the identity of:</text>
    <paragraph num="A.">
      <text>The reporter of child abuse or neglect, or of abuse, neglect, self-neglect, or exploitation of a vulnerable adult; or</text>
    </paragraph>
    <paragraph num="B.">
      <text>Any other individual whose life or safety may be endangered by disclosing the information.</text>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".04" heading="Program Records.">
    <paragraph num="A.">
      <text>Except as permitted by other law or regulation, a custodian shall deny a request for disclosure of any information or record concerning an applicant for service or customer under the following programs:</text>
      <paragraph num="(1)">
        <text>Social Services;</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Family Investment;</text>
      </paragraph>
      <paragraph num="(3)">
        <text>Purchase of Child Care;</text>
      </paragraph>
      <paragraph num="(4)">
        <text>Community Services;</text>
      </paragraph>
      <paragraph num="(5)">
        <text>Child Support Enforcement; and</text>
      </paragraph>
      <paragraph num="(6)">
        <text>Medical Assistance.</text>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>Disclosure of Information.</text>
      <paragraph num="(1)">
        <text>Information described in §A of this regulation may be disclosed as follows:</text>
        <paragraph num="(a)">
          <text>Under a court order;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>To a State, local government, or federal official or employee, for a purpose directly connected with the administration of the programs specified in §A of this regulation including, but not limited to:</text>
          <paragraph num="(i)">
            <text>Verification of eligibility, and</text>
          </paragraph>
          <paragraph num="(ii)">
            <text>Audits or criminal investigation of these programs;</text>
          </paragraph>
        </paragraph>
        <paragraph num="(c)">
          <text>To a volunteer or contractor of a State or federal agency for a purpose directly connected with the administration of a program listed in §A of this regulation if the volunteer or contractor has been informed of, and has executed a written agreement to abide by, State and federal confidentiality laws and regulations.</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>Medical Assistance records and information may be disclosed only for a purpose directly connected with the administration of the program including assisting the Child Support Administration in locating absent parents.</text>
      </paragraph>
      <paragraph num="(3)">
        <text>The custodian shall disclose the current address of a customer to a federal, State, or local law enforcement officer who:</text>
        <paragraph num="(a)">
          <text>Can be properly identified as a law enforcement officer;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Shows the custodian a signed warrant for the arrest of the customer which establishes that the customer is a fugitive felon; and</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Provides the name and Social Security number of the customer.</text>
        </paragraph>
      </paragraph>
      <paragraph num="(4)">
        <text>With regard to a fugitive felon in a food stamp case, the custodian shall disclose the current address, the Social Security number, and, if available, a photograph of a food stamp household member to a federal, State, or local law enforcement officer who:</text>
        <paragraph num="(a)">
          <text>Can be properly identified as a law enforcement officer engaged in official duties which include locating or arresting the food stamp household member;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Demonstrates that the food stamp household member either:</text>
          <paragraph num="(i)">
            <text>Is a fugitive felon, or</text>
          </paragraph>
          <paragraph num="(ii)">
            <text>Has information concerning a fugitive felon; and</text>
          </paragraph>
        </paragraph>
        <paragraph num="(c)">
          <text>Provides the name of the food stamp household member.</text>
        </paragraph>
      </paragraph>
    </paragraph>
    <paragraph num="C.">
      <text>Notice of Record Disclosure.</text>
      <paragraph num="(1)">
        <text>When §B of this regulation does not apply, and disclosure is permitted under State law or regulation, the Department shall:</text>
        <paragraph num="(a)">
          <text>Notify an applicant or customer described in §A of this regulation, when possible, of the request for a record concerning the applicant or customer; and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Obtain the applicant's or customer's consent to disclose the record.</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>The Department:</text>
        <paragraph num="(a)">
          <text>May require the requestor to obtain the applicant or customer's consent pursuant to Regulation .05 of this chapter;</text>
        </paragraph>
        <paragraph num="(b)">
          <text>May not provide a requestor with any information regarding whether:</text>
          <paragraph num="(i)">
            <text>Records exist for an individual, or</text>
          </paragraph>
          <paragraph num="(ii)">
            <text>An individual is an applicant or customer; and</text>
          </paragraph>
        </paragraph>
        <paragraph num="(c)">
          <text>In an emergency, may disclose information without prior consent if the Department notifies the applicant or customer of the disclosure:</text>
          <paragraph num="(i)">
            <text>Orally or in writing, and</text>
          </paragraph>
          <paragraph num="(ii)">
            <text>Within 2 working days of the disclosure.</text>
          </paragraph>
        </paragraph>
      </paragraph>
    </paragraph>
    <paragraph num="D.">
      <text>Food Stamps.</text>
      <paragraph num="(1)">
        <text>Upon receipt of a written request from a responsible member of a household receiving food stamp assistance, the Department shall allow the individual to review the food stamp records for the household.</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Before review by the household member, the Department shall remove from the record:</text>
        <paragraph num="(a)">
          <text>Names and identifying information of individuals who have disclosed information to the Department without the household's knowledge; and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Information about any criminal prosecutions.</text>
        </paragraph>
      </paragraph>
    </paragraph>
    <paragraph num="E.">
      <text>Research. The Department may disclose:</text>
      <paragraph num="(1)">
        <text>Identifying information to an individual engaged in a research project only if:</text>
        <paragraph num="(a)">
          <text>An applicant or a customer who is the subject of a record to be disclosed has signed a written consent form for the disclosure, in accordance with Regulation .05 of this chapter, and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>The official custodian has given prior written permission for the research project; and</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>Nonidentifying information for research purposes without the consent of the applicant or customer.</text>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".05" heading="Disclosure by Consent.">
    <paragraph num="A.">
      <text>An applicant or customer may consent to disclosure of specific information to a third party, if the requirements of this regulation are met.</text>
    </paragraph>
    <paragraph num="B.">
      <text>An applicant or customer identified in the record shall sign a written consent form, which includes the:</text>
      <paragraph num="(1)">
        <text>Specific information to be disclosed;</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Person or agency requesting the information;</text>
      </paragraph>
      <paragraph num="(3)">
        <text>Person or agency to receive the information;</text>
      </paragraph>
      <paragraph num="(4)">
        <text>Purpose for the disclosure;</text>
      </paragraph>
      <paragraph num="(5)">
        <text>Date of the request;</text>
      </paragraph>
      <paragraph num="(6)">
        <text>Signature of the applicant or customer; and</text>
      </paragraph>
      <paragraph num="(7)">
        <text>Date signed.</text>
      </paragraph>
    </paragraph>
    <paragraph num="C.">
      <text>The applicant or customer shall verify the applicant's or customer's identity to the custodian, either in person or by affidavit or notarized consent form.</text>
    </paragraph>
    <paragraph num="D.">
      <text>An applicant or customer who is 16 years old or older may sign the applicant's or customer's own consent form.</text>
    </paragraph>
    <paragraph num="E.">
      <text>If an applicant or customer is a child younger than 16 years old, the child's parent, guardian, or attorney may consent under this regulation to release of information from the child's records, if:</text>
      <paragraph num="(1)">
        <text>The consenting individual is not alleged to have abused or neglected the child or any of the child's siblings; and</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Disclosure is in the child's best interest.</text>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".06" heading="Mandatory Denial of a Request for Disclosure of Other Records—General.">
    <paragraph num="A.">
      <text>A custodian of a record shall deny a request for disclosure:</text>
      <paragraph num="(1)">
        <text>If the disclosure requested is contrary to any:</text>
        <paragraph num="(a)">
          <text>State or federal statute or regulation,</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Maryland Rule of Procedure, or</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Court order;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>Of a personnel record including, but not limited to an employee's:</text>
        <paragraph num="(a)">
          <text>Letters of reference, and</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Home address or telephone number;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(3)">
        <text>Of information concerning the security of an information system;</text>
      </paragraph>
      <paragraph num="(4)">
        <text>Of a trade secret or confidential commercial information; and</text>
      </paragraph>
      <paragraph num="(5)">
        <text>Subject to §B of this regulation, of information about the licensing of an individual.</text>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>Licensing Records. Only the following information may be disclosed from a licensing record:</text>
      <paragraph num="(1)">
        <text>A licensee's:</text>
        <paragraph num="(a)">
          <text>Name,</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Business address, or, if the business address is not available, the home address,</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Business telephone number,</text>
        </paragraph>
        <paragraph num="(d)">
          <text>Educational and occupational background,</text>
        </paragraph>
        <paragraph num="(e)">
          <text>Professional qualifications;</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>Findings and orders that result from formal disciplinary actions;</text>
      </paragraph>
      <paragraph num="(3)">
        <text>Evidence that has been provided to the custodian to meet the requirements of a statute regarding financial responsibility;</text>
      </paragraph>
      <paragraph num="(4)">
        <text>Other licensing information which the official custodian determines should be disclosed to fulfill a compelling public purpose; and</text>
      </paragraph>
      <paragraph num="(5)">
        <text>Except for the identity of a reporter of any allegation of child abuse or neglect, or of abuse, neglect, self-neglect, exploitation of a vulnerable adult, information requested by a licensee who is the subject of the requested record.</text>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".07" heading="Discretionary Denial of Request for Disclosure of Records.">
    <text>An official custodian may deny disclosure or personal review of a record otherwise required to be disclosed if:</text>
    <paragraph num="A.">
      <text>The official custodian believes that disclosure is contrary to:</text>
      <paragraph num="(1)">
        <text>The public interest;</text>
      </paragraph>
      <paragraph num="(2)">
        <text>In a child abuse or neglect case, the best interest of a child who was allegedly subject to abuse or neglect, of the child's siblings, or of other children in the household, family, or care of the alleged abuser or neglector; or</text>
      </paragraph>
      <paragraph num="(3)">
        <text>In an adult protective service case, the best interest of a vulnerable adult who was allegedly subject to abuse, neglect, self-neglect, or exploitation; and</text>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>One of the following circumstances exists:</text>
      <paragraph num="(1)">
        <text>A State or federal statute or regulation, a Maryland Rule of Procedure, or a court order gives the custodian discretion to deny disclosure,</text>
      </paragraph>
      <paragraph num="(2)">
        <text>The official custodian determines, after consulting with counsel, that the record is subject to an attorney-client, attorney work-product, executive, or other privilege,</text>
      </paragraph>
      <paragraph num="(3)">
        <text>The information requested consists of specific details of a research project conducted by a State agency, except that the name, title, expenditures, and availability date of the final project summary shall be disclosed upon request, or</text>
      </paragraph>
      <paragraph num="(4)">
        <text>The record concerns a law enforcement investigation, or is an investigatory file compiled for a law enforcement, judicial, or prosecution purpose, to the extent permitted by State Government Article, §10-618, Annotated Code of Maryland.</text>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".08" heading="Reporting Crimes, Child Abuse, and Neglect.">
    <text>The following prevail over the confidentiality provisions of this chapter:</text>
    <paragraph num="A.">
      <text>Suspected child abuse or neglect, or abuse, neglect, self-neglect, or exploitation of a vulnerable adult, shall be reported in accordance with the provisions of Family Law Article, Annotated Code of Maryland;</text>
    </paragraph>
    <paragraph num="B.">
      <text>Suspected fraud in the administration of a Department program shall be reported as required by the regulations for that program;</text>
    </paragraph>
    <paragraph num="C.">
      <text>Any ongoing or imminent criminal conduct of an applicant or customer may be reported to appropriate law enforcement personnel.</text>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".09" heading="Continuing Requirements of Confidentiality.">
    <text>When the custodian of the record discloses confidential information to an individual other than an employee of the Department or a law enforcement agency in accordance with this chapter and COMAR 07.01.02, the custodian shall inform the individual to whom the disclosure is made of the obligation to keep the information confidential, in accordance with Article 88A, §6, Annotated Code of Maryland.</text>
  </regulation>
  <regulation prefix="Regulation" num=".10" heading="Criminal Penalty.">
    <text>A court may find a disclosure of confidential information in violation of this chapter to:</text>
    <paragraph num="A.">
      <text>Be a criminal offense punishable by a fine of not more than $500, or by 90 days imprisonment, or both; and</text>
    </paragraph>
    <paragraph num="B.">
      <text>Result in civil liability for damages.</text>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".11" heading="Limitations on Information Sent to Customers.">
    <paragraph num="A.">
      <text>Materials sent or distributed to an applicant for service or customer, or to vendors of medical services provided to customers of public assistance, shall:</text>
      <paragraph num="(1)">
        <text>Be directly connected to the administration of the respective program and have no political implications; and</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Contain the names only of individuals directly connected with the administration of the program, identified only in their official capacity with the Department.</text>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>This regulation does not prohibit:</text>
      <paragraph num="(1)">
        <text>The distribution of information as part of the administration of a program, including, but not limited to:</text>
        <paragraph num="(a)">
          <text>Notice of the availability of free medical examinations,</text>
        </paragraph>
        <paragraph num="(b)">
          <text>Notice of the availability of surplus food, or</text>
        </paragraph>
        <paragraph num="(c)">
          <text>Consumer protection information; or</text>
        </paragraph>
      </paragraph>
      <paragraph num="(2)">
        <text>Having on display, or otherwise making available in agency offices, materials containing public interest information, including voting materials.</text>
      </paragraph>
    </paragraph>
  </regulation>
  <regulation prefix="Regulation" num=".12" heading="Protection of Customer Case Files and Other Public Records.">
    <paragraph num="A.">
      <text>A local department shall have written policies establishing procedures for the:</text>
      <paragraph num="(1)">
        <text>Maintenance of customer case files; and</text>
      </paragraph>
      <paragraph num="(2)">
        <text>Removal and return of materials to customer case files.</text>
      </paragraph>
    </paragraph>
    <paragraph num="B.">
      <text>The Department shall safeguard information obtained from any State agency, or other state or federal agencies in accordance with the procedures, if any, established by that state or agency.</text>
    </paragraph>
  </regulation>
  <annotations>
    <annotation type="Authority">Article 88A, §§5 and 6; State Government Article, §10-611 et seq.; Article 41, Title 6; Annotated Code of Maryland</annotation>
    <annotation type="History" subtype="Administrative History">Effective date: March 11, 1985 (12:5 Md. R. 481)</annotation>
    <annotation type="History" subtype="Administrative History">Regulations .01—.12, Access to Public Records, repealed effective October 28, 1991 (18:21 Md. R. 2306)</annotation>
    <annotation type="History" subtype="Administrative History">Regulations .01—.12, Confidentiality of Records, adopted effective October 28, 1991 (18:21 Md. R. 2306)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .04C, F amended effective May 24, 1993 (20:10 Md. R. 849)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .05B amended effective May 24, 1993 (20:10 Md. R. 849)</annotation>
    <annotation type="History" subtype="Administrative History">Chapter revised effective June 28, 1999 (26:13 Md. R. 1018)</annotation>
    <annotation type="History" subtype="Administrative History">Regulation .02B amended effective October 8, 2007 (34:20 Md. R. 1735)</annotation>
  </annotations>
</chapter>