Skip to Content

General Provisions, Colo. Code Regs. § 2-502-1 (21.170.1)

Link to the law
This will open in a new window

General Provisions
Requires agencies that provide behavioral health services pursuant to contracts with the Department of Human Services to maintain medical records in compliance with HIPAA and 42 CFR Part 2. Species the length of time that inpatient and outpatient agencies must maintain records and requires record disposal in compliance with state and federal confidential laws. Requires agencies to establish policies and procedures for maintaining confidentiality when transporting records and reporting breaches. Clarifies that agency staff and the Department may access records.