The CMIA defines the following terms: health care service plan; authorization; authorized recipient; contractor; licensed health care professional; marketing; medical information; patient; pharmaceutical company; and provider of health care.
A provider of health care, a health care service plan, or a contractor shall disclose medical information if the disclosure is compelled by any of the following: Court order; Order from a board, commission, or agency; Subpoena from a party before a court or agency; Arbitrator or panel; Search Warrant; Patient or Patient's representative; or, Coroner conducting an investigation
Health care providers, health care service plans, contractors, and corporations shall not intentionally use medical information for marketing or any purpose not necessary to provide health care services to the patient unless otherwise authorized by patient.
An authorization for an employer to disclose medical information shall be valid if it complies with all of the following: 1) must be signed by the patient (or in some cases, his legal representative, or beneficiary) and states: (1) the use of the type of information to be disclosed; (2) the names of the health care provider or other parties that may disclose the information or who are authorized to receive the info; (3) the limitations on use of the info; (4) the date after which the information can no longer be disclosed.
Sets forth the scope of liability against any person or entity, other than a licensed health care professional, who knowingly and willfully obtains, discloses, or uses medical information of the plaintiff.
Sets forth the scope of liability against any person or entity, other than a licensed health care professional, who knowingly or willfully obtains or uses medical information of the plaintiff for financial gain.
Medical professionals (as specified) must make all of a patient's records available for inspection to an attorney presenting a written authorization from the patient