(A) The medicaid director shall adopt rules under section 5160.02 of the Revised Code implementing sections 5160.45 to 5160.481 of the Revised Code and governing the custody, use, disclosure, and preservation of the information generated or received by the department of medicaid, county departments of job and family services, other state and county entities, contractors, grantees, private entities, or officials participating in the administration of medical assistance programs. The rules shall be adopted in accordance with Chapter 119 of the Revised Code. The rules may define who is an “authorized representative” for purposes of sections 5160.45 and 5160.46 of the Revised Code. The rules shall specify conditions and procedures for the release of information, which may include both of the following:

Ask a legal question, get an answer ASAP!
Click here to chat with a lawyer about your rights.

(1) Permitting a provider of a service under a medical assistance program limited access to information that is essential for the provider to render the service or to bill for the service rendered;

(2) Permitting a contractor, grantee, or other state or county entity limited access to information that is essential for the contractor, grantee, or entity to perform administrative or other duties on behalf of the department or a county department.

(B) The department of aging, when investigating a complaint under section 173.20 of the Revised Code, shall be granted any limited access permitted in the rules authorized by division (A)(1) of this section.

A contractor, grantee, or entity given access to information pursuant to the rules authorized by division (A)(2) of this section is bound by the director’s rules. Disclosure of the information by the contractor, grantee, or entity in a manner not authorized by the rules is a violation of section 5160.45 of the Revised Code.