Maryland Code, HEALTH – GENERAL 4-309
Terms Used In Maryland Code, HEALTH - GENERAL 4-309
- Conviction: A judgement of guilt against a criminal defendant.
- Damages: Money paid by defendants to successful plaintiffs in civil cases to compensate the plaintiffs for their injuries.
- including: means includes or including by way of illustration and not by way of limitation. See
- Person: includes an individual, receiver, trustee, guardian, personal representative, fiduciary, representative of any kind, corporation, partnership, business trust, statutory trust, limited liability company, firm, association, or other nongovernmental entity. See
(b) A health care provider may not refuse to disclose a medical record on the request of a person in interest because of the failure of the person in interest to pay for health care rendered by the health care provider.
(c) A health care provider or any other person is in violation of this subtitle if the health care provider or any other person:
(1) Requests or obtains a medical record under false pretenses or through deception; or
(2) Discloses a medical record in violation of this subtitle.
(d) Except as otherwise provided in subsection (e) of this section, a health care provider or any other person, including an officer or employee of a governmental unit, who knowingly and willfully violates any provision of this subtitle is guilty of a misdemeanor and on conviction is subject to a fine not exceeding $1,000 for the first offense and not exceeding $5,000 for each subsequent conviction for a violation of any provision of this subtitle.
(e) (1) A health care provider or any other person, including an officer or employee of a governmental unit, who knowingly and willfully requests or obtains a medical record under false pretenses or through deception or knowingly and willfully discloses a medical record in violation of this subtitle is guilty of a misdemeanor and on conviction is subject to the following penalties:
(i) A fine not exceeding $50,000, imprisonment for not more than 1 year, or both;
(ii) If the offense is committed under false pretenses, a fine not exceeding $100,000, imprisonment for not more than 5 years, or both; and
(iii) If the offense is committed with intent to sell, transfer, or use individually identifiable health information for commercial advantage, personal gain, or malicious harm, a fine not exceeding $250,000, imprisonment for not more than 10 years, or both.
(2) This subsection does not apply to an officer or employee of a governmental unit that is conducting a criminal investigation.
(f) A health care provider or any other person who knowingly violates any provision of this subtitle is liable for actual damages.