How are states protecting the privacy of health information held by health care providers?

Abstract

On April 14, 2001, the Federal Health Privacy Rule, which grants patients greater access to their medical records and more control over how their personal health information is used, took effect. The Rule addresses, among other things, the obligations of health care providers to protect health information. The Rule, however, does not preempt stronger state laws governing the privacy of medical information. It is therefore extremely important to determine how each state is protecting health information held by health care providers.