HF3443 Summary

• Establishes that Minnesota patient health record privacy protections must exceed federal HIPAA standards (45 CFR part 164) regarding use, disclosure, and need for express legal permission.

• Requires providers to obtain signed and dated patient consent, specific Minnesota law authorization, or a representation from another provider holding patient consent before releasing health records.

• Mandates providers document all health record releases without patient consent, including date, circumstances, recipient, and records released; when using provider representations of consent, must document the requesting provider, patient identity, records requested, and request date.

• Requires persons requesting or disclosing health records to warrant that consent forms contain no false information, accurately reflect patient intent, and that requests do not exceed patient-imposed limits.

• All amendments are effective the day following final enactment and apply to health records released on or after that date.