| (a) Maintenance of medical records. The LMHA, MCO,
and the provider must ensure:
(1) protection against unauthorized access, disclosure,
modification or destruction of medical records, whether accidental
or deliberate;
(2) the availability, integrity, utility, authenticity,
and confidentiality of information within the medical record;
(3) a current, organized, legible, and comprehensive
records system that:
(A) conforms to good professional practice;
(B) permits effective clinical review and audit; and
(C) facilitates prompt and systematic retrieval of
information;
(4) a medical records system with sufficient redundancy
to ensure access to individual records; and
(5) compliance with applicable federal and state laws,
rules, and regulations, including HIPAA, 42 CFR Part 2, and the requirements
described in Chapter 414, Subchapter A of this title (relating to
Protected Health Information).
(b) Disaster recovery plan. The LMHA, MCO, and the
provider must maintain a written disaster recovery plan for information
resources that will ensure service continuity.
|
| Source Note: The provisions of this §301.329 adopted to be effective April 29, 2009, 34 TexReg 2603; transferred effective March 15, 2020, as published in the February 21, 2020 issue of the Texas Register, 45 TexReg 1237 |
