Any document relevant to the business operations of a licensee, and not involving medical records attributable to identifiable patients, may be inspected and copied where relevant to an investigation of a licensee by the Attorney General or other authorized investigators.
When customer records that contain personal information (including medical information) are no longer to be retained, a business shall take all reasonable steps to dispose of the records by shredding, erasing, or otherwise modifying the personal information in those records to make it unreadable or undecipherable through any means.
Upon the patient's written request, any corporation that compiles or maintains medical information for any reason, shall provide the patient, at no charge, with a copy of any medical profile, summary, or information maintained by the corporation or entity with respect to the patient.
Health care providers, health care service plans, contractors, and corporations shall not intentionally use medical information for marketing or any purpose not necessary to provide health care services to the patient unless otherwise authorized by patient.
Contractors and corporations shall not further disclose patient or enrollee medical information received pursuant to this section to any person or entity that does not provide direct health care services to the patient or her health care provider, health care service plan or insurer.
A person or entity that underwrites or sells annuity contracts or contracts insuring against loss, harm, damage, illness, disability, or death. . . shall not disclose individually identifiable information concerning the health of, or the medical or genetic history of, a customer, to any [other financial or credit institution.]
A financial institution shall not disclose to, or share a consumer's nonpublic personal information without the consumer's consent, including disclosure of medical record information (as defined).
Two or more primary care clinics that are operated by a single nonprofit corporation shall be entitled to consolidate their administrative functions, which include storing/maintaining offsite patient medical records that have been inactive for at least 3 yrs.
Claimants may obtain, upon request, copies of claim-related documents. However, certain documents, including documents that contain medically privileged information, are excluded from the documents an insurer is required to provide to a claimant.
