Sec 20-2509. Confidentiality

A. A utilization review agent shall file with the director written procedures for assuring that patient information it obtains during the process of utilization review is maintained as confidential in accordance with applicable federal and state laws, is used solely for the purposes of utilization review, quality assurance, discharge planning and catastrophic case management and is shared only with agencies authorized by the patient in writing and on a form prescribed by the director to receive the information. Summary data are not confidential if the data do not provide sufficient information to allow identification of individual patients. This subsection does not permit a person to obtain information without complying with other requirements of this title.

B. A utilization review agent shall comply with all applicable state and federal laws relating to the confidentiality of medical records.