R432-700-19. Confidentiality and Release of Information

(1) The agency must develop and implement policies and procedures to safeguard patient records against loss, destruction, or unauthorized use.

(2) There shall be written procedures for the use and removal of medical records. The release of information, including photographs, shall require the written consent of the patient.

(3) Patient records shall be confidential. Information may be disclosed only to authorized persons in accordance with federal regulations, state rules, and local laws.

(4) Authorized representatives of the Department shall be allowed to review records to determine compliance with licensure rules and standards.

(5) When a patient is referred to another agency or facility, the home health agency may release information only with the written consent of the patient.

(6) Provision shall be made for filing, safe storage, and easy accessibility of medical records.