Please consider making a donation to keep this project's resources available at no cost to the public. Your donation will support new research, updates to current resources, and website maintenance for HealthInfoLaw.org.
General Provisions, Colo. Code Regs. § 2-502-1 (21.170.1)
Link to the law
This will open in a new window
This will open in a new window
General Provisions
Requires agencies that provide behavioral health services pursuant to contracts with the Department of Human Services to maintain medical records in compliance with HIPAA and 42 CFR Part 2. Species the length of time that inpatient and outpatient agencies must maintain records and requires record disposal in compliance with state and federal confidential laws. Requires agencies to establish policies and procedures for maintaining confidentiality when transporting records and reporting breaches. Clarifies that agency staff and the Department may access records.
.png)