(A) Subject to division (B) of this section, a covered entity shall do both of the following:

Terms Used In Ohio Code 3798.03

  • Personal representative: means a person who has authority under applicable law to make decisions related to health care on behalf of an adult or emancipated minor, or the parent, legal guardian, or other person acting in loco parentis who is authorized under law to make health care decisions on behalf of an unemancipated minor. See Ohio Code 3798.01

(1) If an individual’s protected health information is maintained by the covered entity in a designated record set, provide the individual or the individual’s personal representative with access to that information in a manner consistent with 45 C.F.R. 164.524;

(2) Implement and maintain appropriate administrative, technical, and physical safeguards to protect the privacy of protected health information in a manner consistent with 45 C.F.R. 164.530(c).

(B) If a covered entity is a hybrid entity, this section applies only to the health care component of the covered entity.