Every provider of health care, health care service plan, pharmaceutical company, or contractor who creates, maintains, preserves, stores, abandons, destroys, or disposes of medical records shall do so in a manner that preserves the confidentiality of the information contained therein.
Any authorized person or entity requesting medical information relating to the patient's outpatient psychotherapy treatment must submit to the patient and to the health care provider, health care service plan, or contractor a signed written request that details: (1) the specific information being requested and its intended use; (2) the duration of its use before being destroyed or disposed of; (3) a statement that the information will not be used for any purpose other than its intended use; (4) a statement that the information and all copies of it will be destroyed or returned before or immedi
