Our office is following the guidelines established in Federal Health Insurance Portability and Accountability Act (HIPAA) regulations addressing the privacy of health care information, found at 45 CFR §§ 160 & 164, 42 CFR part 2 – Confidentiality of Substance Use Disorder Patient's records and Maryland's Confidentiality of Medical Records Act (MCMRA), codified at Health-General § 4-301 et seq. HIPAA and MCMRA both establish a general rule of confidentiality for health care information. MCMRA requires a health care provider to keep the medical record of the patient confidential and disclose information only as provided by the act itself or as otherwise provided by law. HIPAA enumerates permitted disclosures slightly more specifically by allowing disclosures: to the individual (patient); for treatment, payment, and health care operations; incident to a use or disclosure permitted by the act; and pursuant to authorizations, agreements, or certain public use exceptions. The 42 CFR Part 2 regulations serve to protect patient records created by federally assisted programs for the treatment of substance use disorders (SUD). Part 2 has been revised to further facilitate better coordination of care in response to the opioid epidemic while maintaining its confidentiality protections against unauthorized disclosure and use.
This notice if effective as of ________________________ and it is our intention to abide by the terms of the Notice of Privacy Practices and HIPAA Regulations currently in effect. We reserve the right to change the terms of our Notice of Privacy Practice and to make the new notice provision effective for all PHI that we maintain. We will post and you may request a written copy of the revised Notice of Privacy Practice from our office.