HARRY HUGHES, Governor

223

(2) AS AUTHORIZED IN ARTICLE 48A, SUBTITLE 20 OF
THE CODE.

(B)  PROHIBITED DISCLOSURES.

ANY PROVIDER OF MEDICAL CARE WHO HAS CUSTODY OF MEDICAL
RECORDS MAY NOT REVEAL SPECIFIC MEDICAL INFORMATION
CONTAINED IN THOSE RECORDS TO ANY PERSON UNLESS AUTHORIZED
BY THE INDIVIDUAL ON WHOM THE RECORD IS KEPT.

(C)  INAPPLICABILITY OF SECTION.

SUBSECTION (B) OF THIS SECTION DOES NOT APPLY TO A
PROVIDER OF MEDICAL CARE WHO HAS CUSTODY OF MEDICAL RECORDS
IF THE PROVIDER IS:

(1)  PERFORMING MEDICAL SERVICES OR ALLIED
SUPPORT SERVICES FOR OR ON BEHALF OF A PATIENT;

(2)  PROVIDING INFORMATION REQUESTED BY OR TO
FURTHER THE PURPOSE OF A MEDICAL REVIEW COMMITTEE,
ACCREDITATION BOARD, OR COMMISSION, OR IN RESPONSE TO LEGAL
PROCESS;

(3)  PROVIDING INFORMATION REQUIRED TO CONDUCT
THE PROPER ACTIVITIES OF THE HEALTH CARE PROVIDER;

(4)  PROVIDING INFORMATION TO A GOVERNMENT AGENCY
PERFORMING ITS LAWFUL DUTIES AS AUTHORIZED BY AN ACT OF THE
MARYLAND GENERAL ASSEMBLY OR THE UNITED STATES CONGRESS;

(5)  PROVIDING INFORMATION AT THE REQUEST OF A
RESEARCHER FOR MEDICAL AND HEALTH CARE RESEARCH UNDER A
PROTOCOL APPROVED BY AN INSTITUTIONAL REVIEW BOARD;

(6)  REVEALING THE CONTENTS OF MEDICAL RECORDS
UNDER CIRCUMSTANCES WHERE THE IDENTITY OF THE PATIENT IS NOT
DISCLOSED TO THE RECIPIENT OF THE RECORDS;

(7)  PROVIDING INFORMATION TO AN INSURANCE
COMPANY OR TO A DEFENDANT OR THE DEFENDANT'S LEGAL COUNSEL,
IN CONNECTION WITH A POTENTIAL OR ACTUAL MALPRACTICE CLAIM
AGAINST A PROVIDER OF MEDICAL CARE;

(8)  PROVIDING INFORMATION REQUESTED BY ANOTHER
PROVIDER OF MEDICAL CARE FOR THE SOLE PURPOSE OF TREATING
THE INDIVIDUAL ON WHOM THE RECORD IS KEPT;

(9)  PROVIDING INFORMATION TO A THIRD PARTY PAYOR
FOR BILLING PURPOSES ONLY; OR

(10)  PROVIDING INFORMATION TO A NONPROFIT HEALTH
SERVICE PLAN OR A BLUE CROSS OR BLUE SHIELD PLAN TO
COORDINATE BENEFIT PAYMENTS UNDER MORE THAN ONE SICKNESS AND