MD SB678

Authorizes the Office of the Attorney General to enforce existing requirements for electronic health networks and electronic medical record vendors to release nursing home patient records to the nursing home's business associates

Allows any person, including nursing homes and their business associates, to bring civil actions for damages, injunctive relief, and attorney's fees against violators

Plaintiffs may sue whether they interacted directly or indirectly with the person violating the law

Reinforces existing requirements that electronic health networks and vendors must release records in compliant electronic formats, on a regular basis, in a timely manner, and without fees or restrictions

Takes effect October 1, 2025