Skip to Content

Security of Health Information in Massachusetts

Massachusetts law requires the state’s Cancer Registry to maintain its files in a secure location with restricted access.1

 

Footnotes

  • 1. 105 MA ADC 301.035

 

Security of Health Information in Massachusetts

Subtopic Statute/Regulation Description
Storage of health information in a secure location (Cross reference Medical Record Collection) 105. Mass. Code Regs. 140.202. - Reception and Office Areas “Reception and Office Areas”   Each clinic shall provide adequate space and equipment for reception and waiting areas, for...
105. Mass. Code Regs. 143.007. - Administrative Records “Administrative Records”   This section establishes that each program must maintain and have available current, complete, and...
105. Mass. Code Regs. 145.505. - Record Keeping Facilities and Equipment “Record Keeping Facilities and Equipment”   The unit must maintain facilities and equipment, appropriately located and adequate to...
105. Mass. Code Regs. 150.013. - Clinical and Related Records “Clinical and Related Records”   All facilities must provide conveniently located and suitably equipped areas for the recording and...
105. Mass. Code Regs. 170.345. - Records “Records”   Each service must prepare and maintain records that are subject to and available for inspection by the Department at any...
105. Mass. Code Regs. 301.035. - Quality Assurance In order to assure the quality of the data submitted to the Cancer Registry, the health care facility and provider must allow the Cancer Registry to...
Security of health information in hospitals or other health care facilities (Cross reference Health Information Technology): Encryption 105. Mass. Code Regs. 145.545. - Safeguards Against Loss and Use of Medical Records by Unauthorized Persons “Safeguards Against Loss and Use of Medical Records by Unauthorized Persons”   The unit must establish policies to safeguard its...
Security of health information in hospitals or other health care facilities (Cross reference Health Information Technology): Other methods of protecting electronic information 105. Mass. Code Regs. 145.545. - Safeguards Against Loss and Use of Medical Records by Unauthorized Persons “Safeguards Against Loss and Use of Medical Records by Unauthorized Persons”   The unit must establish policies to safeguard its...
Security of health information in hospitals or other health care facilities (Cross reference Health Information Technology): Passwords 105. Mass. Code Regs. 145.545. - Safeguards Against Loss and Use of Medical Records by Unauthorized Persons “Safeguards Against Loss and Use of Medical Records by Unauthorized Persons”   The unit must establish policies to safeguard its...
Unauthorized access or disclosure of health information (Cross reference Privacy & Confidentiality) 105. Mass. Code Regs. 145.550. - Removal of Medical Record “Removal of Medical Record”   No medical records shall be removed from the unit except as required by legal action. In the event...
105. Mass. Code Regs. 145.555. - Release of Medical Record “Release of Medical Record”   Prior to release of any information from a medical record to any person not authorized by law to...