<html xmlns="http://www.w3.org/1999/xhtml"><head><meta charset="UTF-8" /><meta http-equiv='content-language' content='en-us'/><title>SDLRC - Codified Law 58-2-40 - Promulgation of rules to protect privacy of medical records. </title><meta name="Generator" content="PowerTools for Open XML" /><style>span { white-space: pre-wrap; } p.s2073898Normal { text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-top: 0; margin-left: 0; margin-right: 0; margin-bottom: .001pt; } span.s2073898SENU { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } span.s2073898CL { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } p.s2073898Normal-000000 { text-indent: 0.50in; text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-top: 0; margin-left: 0; margin-right: 0; margin-bottom: .001pt; } span.s2073898DefaultParagraphFont { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } p.s2073898Normal-000001 { margin-left: 0.70in; text-indent: -0.45in; text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-top: 0; margin-right: 0; margin-bottom: .001pt; } span.s2073898000002 { font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } span.s2073898SCL { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } span.s2073898SCL-000003 { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } body { text-decoration-skip-ink: none; } </style></head><body><div><p dir="ltr" class="s2073898Normal"><a href="https://sdlegislature.gov/Statutes/Codified_Laws/DisplayStatute.aspx?Type=Statute&amp;Statute=58-2-40"><span class="s2073898SENU">58-2-40</span></a><span xml:space="preserve" class="s2073898SENU">. </span><span class="s2073898CL">Promulgation of rules to protect privacy of medical records.</span></p><p dir="ltr" class="s2073898Normal-000000"><span xml:space="preserve" class="s2073898DefaultParagraphFont">The director of insurance shall promulgate rules pursuant to chapter </span><a href="https://sdlegislature.gov/Statutes/Codified_Laws/DisplayStatute.aspx?Type=Statute&amp;Statute=1-26"><span class="s2073898DefaultParagraphFont">1-26</span></a><span class="s2073898DefaultParagraphFont">, to protect the privacy of personally identifiable health care and medical information, data, and records. The rules shall cover health care and medical information, data, and records collected, used, or disclosed by any person licensed or registered under Title 58 or any person with whom such licensees or registrants contract, and shall include all health care and medical information, data, and records received by or in the possession of the Division of Insurance. The rules may include the following:</span></p><p dir="ltr" class="s2073898Normal-000001"><span class="s2073898DefaultParagraphFont">(1)    Definition of terms;</span></p><p dir="ltr" class="s2073898Normal-000001"><span class="s2073898DefaultParagraphFont">(2)    Standards for the protection of the privacy and confidentiality of personally identifiable health care information and medical records;</span></p><p dir="ltr" class="s2073898Normal-000001"><span class="s2073898DefaultParagraphFont">(3)    Rules for the collection, use, storage, security, disclosure, release, and disposal of health care and medical information, data, and records in all forms, including printed material, plastic media, audio, video, computerized and electronic transmissions;</span></p><p dir="ltr" class="s2073898Normal-000001"><span class="s2073898DefaultParagraphFont">(4)    Rules regarding the sale and exchange of health care and medical information, data, and records;</span></p><p dir="ltr" class="s2073898Normal-000001"><span class="s2073898DefaultParagraphFont">(5)    Rules to define the responsibilities and limitations of those needing or requiring access to health care and medical information, data, and records;</span></p><p dir="ltr" class="s2073898Normal-000001"><span class="s2073898DefaultParagraphFont">(6)    Rules for procedures and documents required for the release or transfer of health care and medical information, data, and records, including the identity of who may release such information and records and under what conditions and provisions of the law, as needed to protect the privacy of personally identifiable health care and medical information, data, and records;</span></p><p dir="ltr" class="s2073898Normal-000001"><span class="s2073898DefaultParagraphFont">(7)    Rules for the collection, use, storage, security, disclosure, distribution, release, and disposal of health care information and medical records obtained, used, or held in connection with the operation, maintenance, or review of insurance certificates, contracts, policies, and plans, and health maintenance organizations, subject to the jurisdiction of the director of insurance.</span></p><p dir="ltr" class="s2073898Normal"><span xml:space="preserve" class="s2073898000002"> </span></p><p dir="ltr" class="s2073898Normal"><span class="s2073898SCL">Source:</span><span xml:space="preserve" class="s2073898SCL-000003"> SL 2000, ch 234, § 1.</span></p></div></body></html>