958 CMR 11.22
Confidentiality
No RBPO or ACO or External Review Agency or external reviewer shall, except as
specifically authorized by an appropriate release signed by a Patient or a Patientโs Authorized
Representative authorized by law, release medical and treatment information or other
information obtained as part of an internal appeal or external review, except to the Office of
Patient Protection and as otherwise authorized or required by law.