RCW 70.02.290
Agency rule-making requirements—Use/destruction of health care information by certain state and local agencies—Unauthorized disclosure—Notice—Rules/policies available on agency's website.
(1) All state or local agencies obtaining patient health care information pursuant to RCW 70.02.050 and 70.02.200 through 70.02.240 that are not health care facilities or providers shall adopt rules establishing their record acquisition, retention, destruction, and security policies that are consistent with this chapter.
(2) State and local agencies that are not health care facilities or providers that have not requested health care information and are not authorized to receive this information under this chapter:
(a) Must not use or disclose this information unless permitted under this chapter; and
(b) Must destroy the information in accordance with the policy developed under subsection (1) of this section or return the information to the entity that provided the information to the state or local agency if the entity is a health care facility or provider and subject to this chapter.
(3) A person who has health care information disclosed in violation of subsection (2)(a) of this section, must be informed of the disclosure by the state or local agency improperly making the disclosure. State and local agencies that are not health care facilities or providers must develop a policy to establish a reasonable notification period and what information must be included in the notice, including whether the name of the entity that originally provided the information to the agency must be included.
(4) Rules or policies adopted under this section must be available through each agency's website.
[ 2014 c 220 § 1; 2013 c 200 § 13.]
NOTES:
Effective date—2014 c 220: "Sections 1 through 7 and 9 through *16 of this act take effect July 1, 2014." [ 2014 c 220 § 17.]
*Reviser's note: 2014 c 220 § 16 was vetoed.
Effective date—2013 c 200: See note following RCW 70.02.010.
Structure Revised Code of Washington
Title 70 - Public Health and Safety
Chapter 70.02 - Medical Records—Health Care Information Access and Disclosure.
70.02.020 - Disclosure by health care provider.
70.02.040 - Patient's revocation of authorization for disclosure.
70.02.045 - Third-party payor release of information.
70.02.050 - Disclosure without patient's authorization—Need-to-know basis.
70.02.060 - Discovery request or compulsory process.
70.02.070 - Certification of record.
70.02.080 - Patient's examination and copying—Requirements.
70.02.090 - Patient's request—Denial of examination and copying.
70.02.100 - Correction or amendment of record.
70.02.110 - Correction or amendment or statement of disagreement—Procedure.
70.02.120 - Notice of information practices—Display conspicuously.
70.02.130 - Consent by others—Health care representatives.
70.02.140 - Representative of deceased patient.
70.02.150 - Security safeguards.
70.02.160 - Retention of record.
70.02.180 - Licensees under chapter 18.225 RCW—Subject to chapter.
70.02.200 - Disclosure without patient's authorization—Permitted and mandatory disclosures.
70.02.205 - Disclosure without patient's authorization—Persons with close relationship.
70.02.210 - Disclosure without patient's authorization—Research.
70.02.220 - Sexually transmitted diseases—Permitted and mandatory disclosures.
70.02.230 - Mental health services, confidentiality of records—Permitted disclosures.
70.02.240 - Mental health services—Minors—Permitted disclosures.
70.02.250 - Mental health services—Department of corrections.
70.02.260 - Mental health services—Requests for information and records.
70.02.270 - Health care information—Use or disclosure prohibited.
70.02.280 - Health care providers and facilities—Prohibited actions.
70.02.300 - Sexually transmitted diseases—Required statement upon disclosure.
70.02.310 - Mental health services—Information and records.
70.02.320 - Mental health services—Minors—Prompt entry in record upon disclosure.
70.02.330 - Obtaining confidential records under false pretenses—Penalty.
70.02.350 - Release of information to protect the public.
70.02.901 - Application and construction—1991 c 335.
70.02.905 - Construction—Chapter applicable to state registered domestic partnerships—2009 c 521.