(1) Each licensed physician and physician assistant shall develop a written plan to ensure the security of patient medical records. The plan shall address at least the following: (a) The storage and proper disposal, if appropriate, of patient medical records;(b) The disposition of patient medical records in the event the licensee dies, retires, or otherwise ceases to practice or provide medical care to patients; and(c) The method by which patients may access or obtain their medical records promptly if any of the events described in subsection (1)(b) of this section occur.(2) Upon initial licensure under this article 240 and upon renewal of a license, the applicant or licensee, as applicable, shall attest to the board that he or she has developed a plan in compliance with this section.(3) A licensee shall inform each patient, in writing, of the method by which the patient may access or obtain his or her medical records if an event described in subsection (1)(b) of this section occurs.(4) A licensee who fails to comply with this section shall be subject to discipline in accordance with section 12-240-125.(5) The board may adopt rules as necessary to implement this section.Renumbered ) A licensee who fails to comply with this section shall be subject to discipline in accordance with section 12-240-125.(5) The board may adopt rules as necessary to implement this section.Renumbered from C.R.S. § 12-36-140 and amended by 2019 Ch. 136, § 1, eff. 10/1/2019.This section is similar to former § 12-36-140 as it existed prior to 2019.
Colorado Legal Code