Source: http://legisweb1.mainelegislature.org/statutes/22/title22sec1711-C.html
Timestamp: 2019-04-19 21:18:15+00:00

Document:
E. "Health care information" means information that directly identifies the individual and that relates to an individual's physical, mental or behavioral condition, personal or family medical history or medical treatment or the health care provided to that individual. "Health care information" does not include information that protects the anonymity of the individual by means of encryption or encoding of individual identifiers or information pertaining to or derived from federally sponsored, authorized or regulated research governed by 21 Code of Federal Regulations, Parts 50 and 56 and 45 Code of Federal Regulations, Part 46, to the extent that such information is used in a manner that protects the identification of individuals. The Board of Directors of the Maine Health Data Organization shall adopt rules to define health care information that directly identifies an individual. Rules adopted pursuant to this paragraph are routine technical rules as defined in Title 5, chapter 375, subchapter II-A.
2. Confidentiality of health information; disclosure. An individual's health care information is confidential and may not be disclosed other than to the individual by the health care practitioner or facility except as provided in subsection 3, 3-A, 3-B, 6 or 11. Nothing in this section prohibits a health care practitioner or health care facility from adhering to applicable ethical or professional standards provided that these standards do not decrease the protection of confidentiality granted by this section.
3-A. Oral authorization to disclose. When it is not practical to obtain written authorization under subsection 3 from an individual or person acting pursuant to subsection 3-B or when a person chooses to give oral authorization to disclose, a health care practitioner or facility may disclose health care information pursuant to oral authorization. A health care practitioner or facility shall record with the individual's health care information receipt of oral authorization to disclose, including the name of the authorizing person, the date, the information and purposes for which disclosure is authorized and the identity or description of the 3rd party to whom the information is to be disclosed.
4. Duration of authorization to disclose. An authorization to disclose may not extend longer than 30 months, except that the duration of an authorization for the purposes of insurance coverage under Title 24, 24-A or 39-A is governed by the provisions of Title 24, 24-A or 39-A, respectively.
5. Revocation of authorization to disclose. A person who may authorize disclosure may revoke authorization to disclose at any time, subject to the rights of any person who acted in reliance on the authorization prior to receiving notice of revocation. A written revocation of authorization must be signed and dated. If the revocation is in electronic form, a unique identifier of the individual and the date the individual authenticated the electronic authorization must be stated in place of the individual's signature and date of signature. A health care practitioner or facility shall record receipt of oral revocation of authorization, including the name of the person revoking authorization and the date. A revocation of authorization must be retained with the authorization and the individual's health care information.
A. To another health care practitioner or facility for diagnosis, treatment or care of individuals or to complete the responsibilities of a health care practitioner or facility that provided diagnosis, treatment or care of individuals, as provided in this paragraph.
(1) For a disclosure within the office, practice or organizational affiliate of the health care practitioner or facility, no authorization is required.
(e) A physician specializing in psychiatry licensed under the provisions of Title 32, chapter 36 or 48.
This subparagraph does not prohibit the disclosure of health care information between a licensed pharmacist and a health care practitioner or facility providing mental health services for the purpose of dispensing medication to an individual.
This subparagraph does not prohibit the disclosure without authorization of health care information covered under this section to a state-designated statewide health information exchange that satisfies the requirement in subsection 18, paragraph C of providing a general opt-out provision to an individual at all times and that provides and maintains an individual protection mechanism by which an individual may choose to opt in to allow the state-designated statewide health information exchange to disclose that individual's health care information covered under Title 34-B, section 1207.
7. Confidentiality policies. A health care practitioner, facility or state-designated statewide health information exchange shall develop and implement policies, standards and procedures to protect the confidentiality, security and integrity of health care information to ensure that information is not negligently, inappropriately or unlawfully disclosed. The policies of health care facilities must provide that an individual being admitted for inpatient care be given notice of the right of the individual to control the disclosure of health care information. The policies must provide that routine admission forms include clear written notice of the individual's ability to direct that that individual's name be removed from the directory listing of persons cared for at the facility and notice that removal may result in the inability of the facility to direct visitors and telephone calls to the individual.
8. Prohibited disclosure. A health care practitioner, facility or state-designated statewide health information exchange may not disclose health care information for the purpose of marketing or sales without written or oral authorization for the disclosure.
10. Requirements for disclosures. Except as otherwise provided by law, disclosures of health care information pursuant to this section are subject to the professional judgment of the health care practitioner and to the following requirements.
11. Health care information subject to other laws, rules and regulations. Health care information that is subject to the provisions of 42 United States Code, Section 290dd-2 (Supplement 1998); chapters 710-B and 711; Title 5, section 200-E; Title 5, chapter 501; Title 24 or 24-A; Title 34-B, section 1207; Title 39-A; or other provisions of state or federal law, rule or regulation is governed solely by those provisions.
12. Minors. If a minor has consented to health care in accordance with the laws of this State, authorization to disclose health care information pursuant to this section must be given by the minor unless otherwise provided by law.
13. Enforcement. This section may be enforced within 2 years of the date a disclosure in violation of this section was or should reasonably have been discovered.
14. Waiver prohibited. Any agreement to waive the provisions of this section is against public policy and void.
15. Immunity. A cause of action in the nature of defamation, invasion of privacy or negligence does not arise against any person for disclosing health care information in accordance with this section. This section provides no immunity for disclosing information with malice or willful intent to injure any person.
16. Application. This section applies to all requests, directives and authorizations to disclose health care information executed on or after February 1, 2000. An authorization to disclose health care information executed prior to February 1, 2000 that does not meet the standards of this section is deemed to comply with the requirements of this section until the next health care encounter between the individual and the health care practitioner or facility.
18. Participation in a state-designated statewide health information exchange. The following provisions apply to participation in a state-designated statewide health information exchange.
(4) A declaration that a health care practitioner, health care facility or other entity may not deny a patient health care treatment based solely on the provider's or patient's decision not to participate in a state-designated statewide health information exchange.
F. A state-designated statewide health information exchange shall process the request of a patient who has decided not to participate in the state-designated statewide health information exchange within 2 business days of receiving the patient's decision to decline, unless additional time is needed to verify the identity of the patient. A signed authorization from the patient is required before a patient is newly entered or reentered into the system if the patient chooses to begin participation at a later date.
20. Exemption from freedom of access laws. Except as provided in this section, the names and other identifying information of individuals in a state-designated statewide health information exchange are confidential and are exempt from the provisions of Title 1, chapter 13.
RR 1997, c. 2, §44 (COR). 1997, c. 793, §A8 (NEW). 1997, c. 793, §A10 (AFF). 1999, c. 3, §§1,2 (AMD). 1999, c. 3, §§3,5 (AFF). 1999, c. 512, §A5 (AMD). 1999, c. 512, §A6, 7 (AFF). 1999, c. 790, §§A58,60 (AFF). RR 2001, c. 1, §26 (COR). 2001, c. 346, §1 (AMD). 2009, c. 211, Pt. B, §17 (AMD). 2009, c. 292, §3 (AMD). 2009, c. 292, §6 (AFF). 2009, c. 387, §§1, 2 (AMD). 2011, c. 347, §§6-8 (AMD). 2011, c. 373, §§1-4 (AMD). 2011, c. 572, §1 (AMD). 2011, c. 691, Pt. A, §20 (AMD). 2013, c. 289, §§1, 2 (AMD). 2013, c. 326, §1 (AMD). 2013, c. 528, §1 (AMD). 2013, c. 528, §12 (AFF). RR 2015, c. 1, §17 (COR). 2015, c. 218, §1 (AMD). 2015, c. 370, §§4, 5 (AMD). 2017, c. 203, §§2-4 (AMD). 2017, c. 402, Pt. C, §44 (AMD). 2017, c. 402, Pt. F, §1 (AFF). 2017, c. 407, Pt. A, §72 (AMD).

References: §44
 §26
 §1
 §17
 §3
 §6
 §1
 §20
 §1
 §1
 §12
 §17
 §1
 §44
 §1
 §72