Medical information, confidentiality, and privacy

Medical information is confidential and is entitled to privacy protection. State and federal law, as well as accreditation organizations indicate both the form and substance of medical records and also define the protections necessary that providers must implement to ensure privacy of medical records. Inappropriate use or disclosure can subject providers to invasion-of-privacy and breach-of-confidentiality lawsuits under state law and to federal civil and criminal penalties under federal law. There are some exceptions to disclosure and use of medical information without patient consent but are very narrow and limited in scope.