• English

    Google Translate Disclaimer

    The Maryland Department of Information Technology (“DoIT”) offers translations of the content through Google Translate. Because Google Translate is an external website, DoIT does not control the quality or accuracy of translated content. All DoIT content is filtered through Google Translate which may result in unexpected and unpredictable degradation of portions of text, images and the general appearance on translated pages. Google Translate may maintain unique privacy and use policies. These policies are not controlled by DoIT and are not associated with DoIT’s privacy and use policies. After selecting a translation option, users will be notified that they are leaving DoIT’s website. Users should consult the original English content on DoIT’s website if there are any questions about the translated content.

    DoIT uses Google Translate to provide language translations of its content. Google Translate is a free, automated service that relies on data and technology to provide its translations. The Google Translate feature is provided for informational purposes only. Translations cannot be guaranteed as exact or without the inclusion of incorrect or inappropriate language. Google Translate is a third-party service and site users will be leaving DoIT to utilize translated content. As such, DoIT does not guarantee and does not accept responsibility for, the accuracy, reliability, or performance of this service nor the limitations provided by this service, such as the inability to translate specific files like PDFs and graphics (e.g. .jpgs, .gifs, etc.).

    DoIT provides Google Translate as an online tool for its users, but DoIT does not directly endorse the website or imply that it is the only solution available to users. All site visitors may choose to use alternate tools for their translation needs. Any individuals or parties that use DoIT content in translated form, whether by Google Translate or by any other translation services, do so at their own risk. DoIT is not liable for any loss or damages arising out of, or issues related to, the use of or reliance on translated content. DoIT assumes no liability for any site visitor’s activities in connection with use of the Google Translate functionality or content.

    The Google Translate service is a means by which DoIT offers translations of content and is meant solely for the convenience of non-English speaking users of the website. The translated content is provided directly and dynamically by Google; DoIT has no direct control over the translated content as it appears using this tool. Therefore, in all contexts, the English content, as directly provided by DoIT is to be held authoritative.

    For Your Information: Medical Records

    Releasing Medical Records

    Retaining of Medical Records

    Medchi for Medical Record Billing

    Releasing Medical Records

    Health care providers are required to disclose medical records within a reasonable time, but no more than 21 working days after the date a person in interest requests the disclosure. A health care provider that knowingly and willfully refuses to disclose medical records in violation of Health-General Article § 4-309 (a)(d) is liable for actual damages, is guilty of a misdemeanor, and on conviction is subject to a fine not exceeding $1,000 for the first offense and not exceeding $5,000 for each subsequent conviction for a violation of any provision of this subtitle.

    The fees that may be charged for preparation and production of medical records may be adjusted annually for inflation using the Consumer Price Index on July 1 of each year. See Medical Records Copying Fee as of 2021.

    More information on the Consumer Price Index can be found at: http://www.bls.gov/bls/proghome.htm

    Health care providers may not refuse to disclose a medical record on the request of a person in interest because of the failure of the person in interest to pay for health care rendered by the provider. Health care providers may require payment of the preparation, copying, shipping and handling fees and charges before turning the records over to a patient or other authorized individual. Health care providers are required to comply with subpoenas, and no fee may be charged to transfer the records of Medicaid recipients to another provider.

    However, physicians using electronic medical records systems should take note of an important change in HIPAA medical records privacy rules. As of February I7, 20 I 0, if a medical practice is using an electronic medical records system, they must provide a patient requesting their medical record with a copy in electronic format if the patient so requests. The charge for the copy provided can be no more than the actual labor costs incurred by the practice in responding to that request.

    A health care provider or any other person, including an officer or employee of a governmental unit, who knowingly and willfully requests or obtains a medical record under false pretenses or through deception or knowingly and willfully discloses a medical record in violation of this subtitle is guilty of a misdemeanor and on conviction is subject to the following penalties: A fine not exceeding $50,000, imprisonment for not more than 1 year , or both; If the offense is committed under false pretenses, a fine not exceeding $100,000, imprisonment for not more than 5 years, or both; and if the offense is committed with intent to sell, transfer, or use individually identifiable health information for commercial advantage, personal gain, or malicious harm, a fine not exceeding $250,000, imprisonment for not more than 10 years, or both. This subsection does not apply to an officer or employee of a governmental unit that is conducting a criminal investigation.

    Being cooperative and timely when a patient requests their medical records avoids complaints to the Board.

    Retaining of Medical Records

    HIPAA regulations require that patient documents must be kept a minimum of six (6) years. The Medical Records Act states that unless a patient is a minor, medical records, laboratory and X-ray reports must be kept at least five years (see §4-403 below).

    Annotated Code of Maryland
    Health-General Article
    Title 4. Statistics and Records
    § 4-403

    (b) Except for a minor patient, unless a patient is notified, a health care provider may not destroy a medical record or laboratory or X-ray report about a patient for 5 years after the record or report is made.

    (c) In the case of a minor patient, a medical record or laboratory or X-ray report about a minor patient may not be destroyed until the patient attains the age of majority plus 3 years or for 5 years after the record or report is made, whichever is later, unless:

    1. The parent or guardian of the minor patient is notified; or
    2. If the medical care documented in the record was provided under § 20-102(c) or § 20-103(c) of this article, the minor patient is notified.
    (d) The notice under subsections (b) and (c) of this section shall:
    1. Be made by first-class mail to the last known address of the patient;
    2. Include the date on which the record of the patient shall be destroyed; and
    3. Include a statement that the record or synopsis of the record, if wanted, must be retrieved at a designated location within 30 days of the proposed date of destruction.
    (e) After the death, retirement, surrender of the license, or discontinuance of the practice or business of a health care provider, the health care provider, the administrator of the estate, or a designee who agrees to provide for the maintenance of the medical records of the practice or business and who states, in writing to the appropriate health occupation board within a reasonable time, that the records will be maintained in compliance with this section, shall:
    1. Forward the notice required in this section before the destruction or transfer of medical records; or
    2. Publish a notice in a daily newspaper that is circulated locally for 2 consecutive weeks:
      (i) Stating the date that the medical records will be destroyed or transferred; and
      (ii) Designating a location, date, and time where the medical records may be retrieved, if wanted.
    (f) (1) After consulting with the Association of Maryland Hospitals and Health Systems, the Maryland State Medical Society, and other interested parties, including consumers and payors, the Secretary shall adopt regulations governing the destruction of medical records.
           (2) The regulations adopted under this subsection shall:
    (i) Specify the manner in which a health care provider shall maintain and store medical records to:
    1. Ensure confidentiality; and
    2. Provide limited access to the medical records until the records are destroyed; and
    (ii) Ensure that the method of destruction renders the medical records unreadable.
            (3) The regulations adopted under this subsection may not:
    (i) Require or encourage the destruction of medical records; or
    (ii) Be inconsistent with any provision of law applicable to the maintenance or destruction of medical records.
    (g) (1) A health care provider or any other person who knowingly violates any provision of this subtitle is liable for actual damages.

           (2) (i) In addition to any other penalties provided under this article, a health care facility that knowingly violates this section is subject to an administrative fine not exceeding $10,000 for all violations cited in a single day.

                (ii) 1. In addition to any other penalties provided under this article, an individual who knowingly violates this section is subject to the fines provided in sub-subparagraph 2 of this subparagraph if the individual is:
    A.     A health care provider, as defined under subsection (a)(1)(i) through (vi) or (viii) through (xx) of this section; or

    B.     An agent, employee, officer, or director of a health care provider.
        2. The administrative fines applicable to an individual covered under sub-subparagraph 1 of this subparagraph shall be assessed as follows:
    A.     The first fine assessed or first set of fines assessed concurrently for all violations cited in a single day may not exceed $1,000;

    B.    The second fine assessed or second set of fines assessed concurrently for all violations cited in a single day may not exceed $2,500; and

    C.     The third or subsequent fine assessed or third or subsequent set of fines assessed concurrently for all violations cited in a single day may not exceed $5,000.


    The Board recommends that a practitioner consult his/her health care attorney regarding retirement from practice and retaining of medical records.