Sec. 20175.
(1) A health facility or agency shall keep and maintain a record for each patient, including a full and complete record of tests and examinations performed, observations made, treatments provided, and in the case of a hospital, the purpose of hospitalization. Unless a longer retention period is otherwise required under federal or state laws or regulations or by generally accepted standards of medical practice, a health facility or agency shall keep and retain each record for a minimum of 7 years from the date of service to which the record pertains. A health facility or agency shall maintain the records in such a manner as to protect their integrity, to ensure their confidentiality and proper use, and to ensure their accessibility and availability to each patient or his or her authorized representative as required by law. A health facility or agency may destroy a record that is less than 7 years old only if both of the following are satisfied:
(a) The health facility or agency sends a written notice to the patient at the last known address of that patient informing the patient that the record is about to be destroyed, offering the patient the opportunity to request a copy of that record, and requesting the patient's written authorization to destroy the record.
(b) The health facility or agency receives written authorization from the patient or his or her authorized representative agreeing to the destruction of the record. Except as otherwise provided under federal or state laws and regulations, records required to be maintained under this subsection may be destroyed or otherwise disposed of after being maintained for 7 years. If records maintained in accordance with this section are subsequently destroyed or otherwise disposed of, those records shall be shredded, incinerated, electronically deleted, or otherwise disposed of in a manner that ensures continued confidentiality of the patient's health care information and any other personal information relating to the patient. If records are destroyed or otherwise disposed of as provided under this subsection, the department may take action including, but not limited to, contracting for or making other arrangements to ensure that those records and any other confidential identifying information related to the patient are properly destroyed or disposed of to protect the confidentiality of patient's health care information and any other personal information relating to the patient. Before the department takes action in accordance with this subsection, the department, if able to identify the health facility or agency responsible for the improper destruction or disposal of the medical records at issue, shall send a written notice to that health facility or agency at the last known address on file with the department and provide the health facility or agency with an opportunity to properly destroy or dispose of those medical records as required under this subsection unless a delay in the proper destruction or disposal may compromise the patient's confidentiality. The department may assess the health facility or agency with the costs incurred by the department to enforce this subsection. In addition to the sanctions set forth in section 20165, a hospital that fails to comply with this subsection is subject to an administrative fine of $10,000.00.
(2) A hospital shall take precautions to assure that the records required by subsection (1) are not wrongfully altered or destroyed. A hospital that fails to comply with this subsection is subject to an administrative fine of $10,000.00.
(3) Unless otherwise provided by law, the licensing and certification records required by this article are public records.
(4) Departmental officers and employees shall respect the confidentiality of patient clinical records and shall not divulge or disclose the contents of records in a manner that identifies an individual except pursuant to court order or as otherwise authorized by law.
(5) A health facility or agency that employs, contracts with, or grants privileges to a health professional licensed or registered under article 15 shall report the following to the department not more than 30 days after it occurs:
(a) Disciplinary action taken by the health facility or agency against a health professional licensed or registered under article 15 based on the licensee's or registrant's professional competence, disciplinary action that results in a change of employment status, or disciplinary action based on conduct that adversely affects the licensee's or registrant's clinical privileges for a period of more than 15 days. As used in this subdivision, "adversely affects" means the reduction, restriction, suspension, revocation, denial, or failure to renew the clinical privileges of a licensee or registrant by a health facility or agency.
(b) Restriction or acceptance of the surrender of the clinical privileges of a licensee or registrant under either of the following circumstances:
(i) The licensee or registrant is under investigation by the health facility or agency.
(ii) There is an agreement in which the health facility or agency agrees not to conduct an investigation into the licensee's or registrant's alleged professional incompetence or improper professional conduct.
(c) A case in which a health professional resigns or terminates a contract or whose contract is not renewed instead of the health facility taking disciplinary action against the health professional.
(6) Upon request by another health facility or agency seeking a reference for purposes of changing or granting staff privileges, credentials, or employment, a health facility or agency that employs, contracts with, or grants privileges to health professionals licensed or registered under article 15 shall notify the requesting health facility or agency of any disciplinary or other action reportable under subsection (5) that it has taken against a health professional licensed or registered under article 15 and employed by, under contract to, or granted privileges by the health facility or agency.
(7) For the purpose of reporting disciplinary actions under this section, a health facility or agency shall include only the following in the information provided:
(a) The name of the licensee or registrant against whom disciplinary action has been taken.
(b) A description of the disciplinary action taken.
(c) The specific grounds for the disciplinary action taken.
(d) The date of the incident that is the basis for the disciplinary action.
(8) The records, data, and knowledge collected for or by individuals or committees assigned a professional review function in a health facility or agency, or an institution of higher education in this state that has colleges of osteopathic and human medicine, are confidential, shall be used only for the purposes provided in this article, are not public records, and are not subject to court subpoena.
History: 1978, Act 368, Eff. Sept. 30, 1978 ;-- Am. 1986, Act 174, Imd. Eff. July 7, 1986 ;-- Am. 1993, Act 79, Eff. Apr. 1, 1994 ;-- Am. 2000, Act 319, Imd. Eff. Oct. 24, 2000 ;-- Am. 2006, Act 481, Imd. Eff. Dec. 22, 2006
Last modified: October 10, 2016