Code of Maryland Regulations
Title 31 - MARYLAND INSURANCE ADMINISTRATION
Subtitle 16 - MISCELLANEOUS
Chapter 31.16.08 - Privacy of Consumer Financial and Health Information
Section 31.16.08.18 - Authorizations for Disclosure of Health Information
Current through Register Vol. 51, No. 19, September 20, 2024
A. A valid authorization to disclose nonpublic personal health information pursuant to this regulation shall be in written or electronic form and shall contain all of the following:
B. An authorization for the purposes of this regulation shall specify a length of time for which the authorization shall remain valid, which may not be for more than 24 months.
C. A consumer or customer who is the subject of nonpublic personal health information may revoke an authorization provided pursuant to this regulation at any time, subject to the rights of an individual who acted in reliance on the authorization before notice of the revocation.
D. A licensee shall retain the authorization or a copy of the authorization in the record of the individual who is the subject of nonpublic personal health information.