65-6824. Same; duties of covered entity. (a) A covered entity shall provide an individual or such individual's personal representative with access to the individual's protected health information maintained, collected, used or disseminated by or for the covered entity in compliance with 45 C.F.R. § 164.524, except that a covered entity which is defined as a health care provider under K.S.A. 2016 Supp. 65-6836, and amendments thereto, shall furnish copies of health care records to a patient, a patient's authorized representative or any other person or entity authorized by law to obtain or reproduce such records in accordance with the provisions of K.S.A. 2016 Supp. 65-6836, and amendments thereto.

(b) A covered entity shall implement and maintain appropriate administrative, technical and physical safeguards to protect the privacy of protected health information in a manner consistent with 45 C.F.R. § 164.530(c).

History: L. 2011, ch. 114, § 24; L. 2013, ch. 112, § 11; L. 2015, ch. 46, § 18; July 1.