Regulation .10 Confidentiality.
Regulation .10 Confidentiality.LinkCopy Citation
Unless otherwise authorized by law, the Department:
A.
Shall keep all applicant and recipient personal information confidential;
B.
May not disclose personal information kept on an applicant or recipient without the written consent of the:
(1)
Applicant;
(2)
Recipient;
(3)
Applicant’s parent or legal guardian; or
(4)
Recipient’s parent or legal guardian;
C.
Shall comply with the laws and regulations concerning the privacy and security of protected health information under:
(1)
Health-General Article, Title 4, Subtitle 3, Annotated Code of Maryland; and
(2)
The Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 U.S.C; §§1320d et seq., as amended, the HITECH Act, 42 U.S.C. §§17932, et seq., as amended, and 45 CFR Parts 160 and 164, as amended, and their implementing regulations; and
D.
Shall ensure that all interactive video technology-assisted communication comply with HIPAA patient privacy and security regulations.