Security of Health Information in Massachusetts
Massachusetts law requires the state’s Cancer Registry to maintain its files in a secure location with restricted access.1
Footnotes
- 1. 105 MA ADC 301.035
Security of Health Information in Massachusetts
| Subtopic | Statute/Regulation | Description |
|---|
| Storage of health information in a secure location (Cross reference Medical Record Collection) | 105. Mass. Code Regs. 140.202. - Reception and Office Areas | “Reception and Office Areas” Each clinic shall provide adequate space and equipment for reception and waiting areas, for... |
| 105. Mass. Code Regs. 143.007. - Administrative Records | “Administrative Records” This section establishes that each program must maintain and have available current, complete, and... | |
| 105. Mass. Code Regs. 145.505. - Record Keeping Facilities and Equipment | “Record Keeping Facilities and Equipment” The unit must maintain facilities and equipment, appropriately located and adequate to... | |
| 105. Mass. Code Regs. 150.013. - Clinical and Related Records | “Clinical and Related Records” All facilities must provide conveniently located and suitably equipped areas for the recording and... | |
| 105. Mass. Code Regs. 170.345. - Records | “Records” Each service must prepare and maintain records that are subject to and available for inspection by the Department at any... | |
| 105. Mass. Code Regs. 301.035. - Quality Assurance | In order to assure the quality of the data submitted to the Cancer Registry, the health care facility and provider must allow the Cancer Registry to... |
| Security of health information in hospitals or other health care facilities (Cross reference Health Information Technology): Passwords | 105. Mass. Code Regs. 145.545. - Safeguards Against Loss and Use of Medical Records by Unauthorized Persons | “Safeguards Against Loss and Use of Medical Records by Unauthorized Persons” The unit must establish policies to safeguard its... |
| Security of health information in hospitals or other health care facilities (Cross reference Health Information Technology): Other methods of protecting electronic information | 105. Mass. Code Regs. 145.545. - Safeguards Against Loss and Use of Medical Records by Unauthorized Persons | “Safeguards Against Loss and Use of Medical Records by Unauthorized Persons” The unit must establish policies to safeguard its... |
| Security of health information in hospitals or other health care facilities (Cross reference Health Information Technology): Encryption | 105. Mass. Code Regs. 145.545. - Safeguards Against Loss and Use of Medical Records by Unauthorized Persons | “Safeguards Against Loss and Use of Medical Records by Unauthorized Persons” The unit must establish policies to safeguard its... |
| Unauthorized access or disclosure of health information (Cross reference Privacy & Confidentiality) | 105. Mass. Code Regs. 145.550. - Removal of Medical Record | “Removal of Medical Record” No medical records shall be removed from the unit except as required by legal action. In the event... |
| 105. Mass. Code Regs. 145.555. - Release of Medical Record | “Release of Medical Record” Prior to release of any information from a medical record to any person not authorized by law to... |
.png)