Section 332-I:1 - Medical Records; DefinitionsI. All medical information contained in the medical records in the possession of any health care provider, or in the possession of any third-party vendor with whom a health care provider contracts to store, handle, and issue copies of such medical records, shall be deemed to be the property of the patient. The patient or the patient's requestor shall be entitled to a copy of such records upon request, as regulated by the Health Insurance Portability and Accountability Act of 1996, as amended ("HIPAA"). (a) For purposes of this section, a "requestor" means the patient's personal representative, an individual authorized to access the patient's medical record through a valid power of attorney, or the patient's attorney.(b) For any request made by a requestor, the cost for electronic copies of the patient's medical records, and all related services, shall be charged at a reasonable rate not to exceed $50.00, and the cost for paper copies of the patient's medical records, and all related services, shall not exceed $5 for the first page, $.41 per page for pages 2 through 50, and $.30 per page for pages 51 and higher. If, however, any redactions to the patient's records are specifically requested by the requestor, such as for example, redactions of sensitive information pertaining to HIV status, drug and alcohol use, mental health, or genetic testing, the requestor may be charged a reasonable cost for the labor necessary to complete those redactions, not to exceed $25 per hour.(c) If a patient's medical records are stored and available in an electronic format, they shall be provided in that format to the requestor. Records which are stored and available in an electronic format shall not be printed and provided in paper format unless specifically requested in paper format by the requestor.(d) All records being provided pursuant to requests by a requestor shall be provided to the requestor within 30 days of the receipt of the request, and any records not provided within 30 days shall be provided at no cost, absent an independent intervening force majeure which renders the requested records inaccessible, irretrievable, or undeliverable within this 30-day timeframe.(e) If an incomplete copy of the requested medical records is provided, and additional requests are required to obtain a complete copy of the originally requested medical records, any records provided pursuant to those additional requests shall be provided at no cost.II. In this chapter: (a) The following terms have the same meaning as given in the regulations under sections 262 and 264 of the Health Insurance Portability and Accountability Act of 1996 (HIPAA): (4) Protected health information.(b) "Health care provider" means any person, corporation, facility, or institution either licensed by this state or otherwise lawfully providing health care services, including, but not limited to, a physician, advanced practice registered nurse, physician assistant, hospital, office, clinic, health center or other health care facility, dentist, nurse, optometrist, pharmacist, podiatrist, physical therapist, mental health professional, care coordinator, managed care provider, or the department of health and human services, and any officer, employee, or agent of such provider acting in the course and scope of employment or agency related to or supportive of health care services.(d) "Marketing" means: (1) To make a communication about a product or service that encourages recipients of the communication to purchase or use the product or service, unless the communication is made by the individual's health care provider;(A) For treatment of the individual;(B) For case management or care coordination for the individual;(C) To direct or recommend to the individual: (i) Alternative treatments or therapies if recommended by the individual's health care provider;(ii) Health care providers;(iii) Settings of care; or(D) For treatment-related reminders or health promotion activities by health care providers.(2) An arrangement between a health care provider and any other person whereby the health care provider discloses protected health information to the other person, in exchange for direct or indirect remuneration, for the other person or an affiliate of the other person to make a communication about the person's own product or service that encourages recipients of the communication to purchase or use that product or service.(e) "Audit trail" means a chronological record identifying specific persons who have accessed an electronic medical record, the date and time the record was accessed, and, if such information is available, the area of the record that was accessed. An audit trail shall not be considered a part of a person's medical care.(f) "Individual" means the subject of the protected health information, including a guardian or other legal representative.III. Release or use of patient identifiable medical information for the purpose of sales or marketing of services or products shall be prohibited without written authorization.Amended by 2024, 265:5, eff. 7/26/2024.Amended by 2020 , 37: 4, eff. 7/29/2020.Amended by 2014 , 189: 1, eff. 9/9/2014.Amended by 2011 , 232: §§1, 2, 3eff. 7/5/2011.1989, 43:2. 1997, 331:11. 1998, 236:2. 2001, 85 : 2 . 2004, 144 : 1 . 2006, 250 : 1 . 2009, 213 : 5 ; 318:2. 2010, 64 : 1 . 2011, 232 : 2 , 3. 2014, 189 : 1 , eff. Sept. 9, 2014. 2020, 37 : 4 , XXIII, XXIV, eff. July 29, 2020.