R432-700-18. Confidentiality and Release of Information

(1) The licensee shall: (a) develop and implement policies and procedures to safeguard client records against loss, destruction, or unauthorized use; (b) have written procedures for the use, release, and removal of medical records, including photographs, that require the written consent of the client; (c) keep client records confidential and only disclose client information to authorized persons; (d) allow authorized representatives of the Department to review records to determine compliance with licensure rules and standards; and (e) provide for filing, safe storage, and easy access to medical records. (2) When a client is referred to another agency or facility, the licensee may release information only with the written consent of the client.