WILLIAM DONALD SCHAEFER, Governor                           Ch. 83

(ii) As otherwise provided by law.

(b)     The provisions of this subtitle do not apply to information:

(1)     Not kept in the medical record of a patient or recipient that is related to
the administration of a health care facility, including:

(i) Risk management;

(ii) Quality assurance; and

(iii) Any activities of a medical or dental review committee that are
confidential under the provisions of Title 14, Subtitle 6 and Title 4, Subtitle 5 of the
Health Occupations Article;

(2)     Governed by the federal confidentiality of alcohol and drug abuse
patient records regulations, 42 CFR Part 2 and the provisions of § 8-601(c) of this article;
or

(3)     Governed by the developmental disability confidentiality provisions in §§
7-1008 through 7-1011 of this article.

(c)     A health care provider may disclose directory information about a patient
without the authorization of a person in interest, except if the patient has instructed the
health care provider in writing not to disclose directory information.

(d)     A person to whom a medical record is disclosed may not redisclose the
medical record to any other person unless the redisclosure is:

(1)     Authorized by the person in interest;

(2)     Otherwise permitted by this subtitle;

(3)     Permitted under Article 88A, § 6(b) of the Code; or

(4)     Directory information.

(e)     The provisions of this subtitle may not be construed to constitute an exception
to the reporting requirements of Title 5, Subtitle 7 and Title 14, Subtitle [2] 3 of the
Family Law Article.

4-305.

(a)     This section may not be construed to impose an obligation on a health care
provider to disclose a medical record.

(b)     A health care provider may disclose a medical record without the
authorization of a person in interest:

(1) (i) To the provider's authorized employees, agents, medical staff,
medical students, or consultants for the sole purpose of offering, providing, evaluating, or
seeking payment for health care to patients or recipients by the provider;

(ii) To the provider's legal counsel regarding only the information in
the medical record that relates to the subject matter of the representation; or

- 1169 -