20-2509. Confidentiality


A. A utilization review agent shall file with the director written procedures for
assuring that patient information it obtains during the process of utilization review is
maintained as confidential in accordance with applicable federal and state laws, is used
solely for the purposes of utilization review, quality assurance, discharge planning and
catastrophic case management and is shared only with agencies authorized by the patient
in writing and on a form prescribed by the director to receive the information. Summary
data are not confidential if the data do not provide sufficient information to allow
identification of individual patients. This subsection does not permit a person to
obtain information without complying with other requirements of this title.


B. A utilization review agent shall comply with all applicable state and federal
laws relating to the confidentiality of medical records.