A. A health professional must prepare a written protocol for the secure storage, transfer and access of the medical records of the health professional’s patients. At a minimum the protocol must specify:

Ask a business law question, get an answer ASAP!
Thousands of highly rated, verified business lawyers.
Click here to chat with a lawyer about your rights.

1. If the health professional terminates or sells the health professional’s practice and the patient’s medical records will not remain in the same physical location, the procedure by which the health professional shall notify each patient in a timely manner before the health professional terminates or sells the health professional’s practice in order to inform the patient regarding the future location of the patient’s medical records and how the patient can access those records.

2. The procedure by which the health professional may dispose of unclaimed medical records after a specified period of time and after the health professional has made good faith efforts to contact the patient.

3. How the health professional shall timely respond to requests from patients for copies of their medical records or to access their medical records.

B. The protocol prescribed in subsection A of this section must comply with the relevant requirements of Title 12, Chapter 13, Article 7.1 regarding medical records.

C. A health professional shall indicate compliance with the requirements of this section on the health professional’s application for relicensure in a manner prescribed by the health professional’s regulatory board.

D. A health professional who does not comply with this section commits an act of unprofessional conduct.

E. In addition to taking disciplinary action against a health professional who does not comply with this section, the health professional’s regulatory board may take corrective action regarding the proper storage, transfer and access of the medical records of the health professional’s patients. For the purposes of this subsection, corrective action does not include taking possession or management of the medical records.

F. For the purposes of this section, health professional does not include a veterinarian.

G. This section does not apply to a health professional who is employed by a health care institution as defined in section 36-401 that is responsible for the maintenance of the medical records.