§ 33.13 Clinical records; confidentiality.

(a) A clinical record for each patient or client shall be maintained
at each facility licensed or operated by the office of mental health or
the office for people with developmental disabilities, hereinafter
referred to as the offices. For the purposes of this section, the term
"facility" shall mean "facility" as such term is defined in section 1.03
of this chapter, provided, however, such term shall also include any
provider of services for individuals with mental illness or
developmental disabilities which is operated by, under contract with,
receives funding from, or is otherwise approved to render services by, a
director of community services pursuant to article forty-one of this
chapter or one or both of the offices, including any such provider which
is exempt from the requirement for an operating certificate under
article sixteen or article thirty-one of this chapter. The record shall
contain information on all matters relating to the admission, legal
status, care, and treatment of the patient or client and shall include
all pertinent documents relating to the patient or client. The
commissioners of such offices, by regulation, each shall determine the
scope and method of recording information, including data pertaining to
admission, legal matters affecting the patient or client, records and
notation of course of care and treatment, therapies, restrictions on
patient's or client's rights, periodic examinations, and such other
information as he or she may require.

* (b) The commissioners may require that statistical information about
patients or clients be reported to the offices.

* NB Effective until June 30, 2027

* (b) The commissioners may require that statistical information about
patients or clients be reported to the offices. Names of patients
treated at out-patient or non-residential facilities shall not be
required as part of any such reports. Hospitals licensed by the office
of mental health and general hospitals shall provide to the office of
mental health, upon request, records relating to persons described in
subdivision (j) of section 7.09 of this chapter who may be disqualified
from possessing a firearm pursuant to 18 USC 422(4)(d).

* NB Effective June 30, 2027

(c) Such information about patients or clients reported to the
offices, including the identification of patients or clients, clinical
records or clinical information tending to identify patients or clients,
and records and information concerning persons under consideration for
proceedings pursuant to article ten of this chapter, at office
facilities shall not be a public record and shall not be released by the
offices or its facilities to any person or agency outside of the offices
except as follows:

1. pursuant to an order of a court of record requiring disclosure upon
a finding by the court that the interests of justice significantly
outweigh the need for confidentiality, provided, however, that nothing
herein shall be construed to affect existing rights of employees in
disciplinary proceedings.

2. to the mental hygiene legal service.

3. to attorneys representing patients or clients in proceedings in
which the patients' or clients' involuntary hospitalization or assisted
outpatient treatment is at issue.

4. to the justice center for the protection of people with special
needs.

5. to the medical review board of the state commission of correction
when such board has requested such information with respect to the death
of a named person, or, with the consent of a patient or client when such
board has requested information about the patient or client providing
that such board requires such information in the exercise of its
statutory functions, powers and duties. Information, books, records or
data which are confidential as provided by law shall be kept
confidential by the state commission and any limitation on the release
thereof imposed by law upon the party furnishing the information, books,
records or data shall apply to the medical review board.

6. to an endangered individual and a law enforcement agency when a
treating psychiatrist or psychologist has determined that a patient or
client presents a serious and imminent danger to that individual. The
reasons for any such disclosures shall be fully documented in the
clinical record. Nothing in this paragraph shall be construed to impose
an obligation upon a treating psychiatrist or psychologist to release
information pursuant to this paragraph.

7. with the consent of the patient or client or of someone authorized
to act on the patient's or client's behalf, to persons and entities who
have a demonstrable need for such information and who have obtained such
consent, provided that disclosure will not reasonably be expected to be
detrimental to the patient, client or another provided, however, that
release of such information to a patient or client shall not be governed
by this subdivision.

8. to the state board for professional medical conduct or the office
of professional discipline or their respective representatives when such
persons or entities request such information in the exercise of their
statutory function, power and duties provided, however, that no such
information shall be released when it concerns the subject of an inquiry
who is also a patient or client, except pursuant to paragraph one of
this subdivision.

9. with the consent of the appropriate commissioner, to:

(i) governmental agencies, insurance companies licensed pursuant to
the insurance law and other third parties requiring information
necessary for payments to be made to or on behalf of patients or clients
pursuant to contract or in accordance with law, such information to be
kept confidential and limited to the information required.

(ii) persons and agencies needing information to locate missing
persons or to governmental agencies in connection with criminal
investigations, such information to be limited to identifying data
concerning hospitalization.

(iii) qualified researchers upon the approval of the institutional
review board or other committee specially constituted for the approval
of research projects at the facility, provided that the researcher shall
in no event disclose information tending to identify a patient or
client.

(iv) a coroner, a county medical examiner, or the chief medical
examiner for New York city upon the request of a facility director that
an investigation be conducted into the death of a patient or client for
whom such record is maintained.

(v) appropriate persons and entities when necessary to prevent
imminent serious harm to the patient or client or another person,
provided, however, nothing in this subparagraph shall be construed to
impose an obligation to release information pursuant to this
subparagraph.

(vi) a district attorney when such request for information is in
connection with and necessary to the furtherance of a criminal
investigation of patient or client abuse.

(vii) appropriate persons and entities when necessary to protect the
public concerning a specific sex offender requiring civil management
under article ten of this chapter.

(viii) to the attorney general, case review panel, or psychiatric
examiners described in article ten of this chapter, when such persons or
entities request such information in the exercise of their statutory
functions, powers and duties under article ten of this chapter.

10. to a correctional facility, when the chief administrative officer
has requested such information with respect to a named incarcerated
individual of such correctional facility as defined by subdivision three
of section forty of the correction law or to the department of
corrections and community supervision, when the department has requested
such information with respect to a person under its jurisdiction or an
incarcerated individual of a state correctional facility, when such
incarcerated individual is within four weeks of release from such
institution to community supervision. Information released pursuant to
this paragraph may be limited to a summary of the record, including but
not limited to: the basis for referral to the facility; the diagnosis
upon admission and discharge; a diagnosis and description of the
patient's or client's current mental condition; the current course of
treatment, medication and therapies; and the facility's recommendation
for future mental hygiene services, if any. Such information may be
forwarded to the department of corrections and community supervision
staff in need of such information for the purpose of making a
determination regarding an incarcerated individual's health care,
security, safety or ability to participate in programs. In the event an
incarcerated individual is transferred, the sending correctional
facility shall forward, upon request, such summaries to the chief
administrative officer of any correctional facility to which the
incarcerated individual is subsequently incarcerated. The office of
mental health and the office for people with developmental disabilities,
in consultation with the commission of correction and the department of
corrections and community supervision, shall promulgate rules and
regulations to implement the provisions of this paragraph.

11. to a qualified person pursuant to section 33.16 of this chapter.

12. to a director of community services as defined in article nine of
this chapter or his or her designee, provided that such director or his
or her designee (i) requests such information in the exercise of his or
her statutory functions, powers and duties pursuant to section 9.37,
9.45, 9.47, 9.48, 9.60 or 41.13 of this chapter; or (ii) the disclosure
of information is required pursuant to section 9.46 of this chapter.

13. to the state division of criminal justice services for the sole
purposes of:

(i) providing, facilitating, evaluating or auditing access by the
commissioner of mental health to criminal history information pursuant
to subdivision (i) of section 7.09 of this chapter; or

(ii) providing information to the criminal justice information
services division of the federal bureau of investigation by the
commissioner of mental health or the commissioner of developmental
disabilities, for the purposes of responding to queries to the national
instant criminal background check system regarding attempts to purchase
or otherwise take possession of firearms, in accordance with applicable
federal laws or regulations.

14. to the criminal justice information services division of the
federal bureau of investigation, for the purposes of responding to
queries to the national instant criminal background check system,
regarding attempts to purchase or otherwise take possession of firearms,
in accordance with applicable federal laws or regulations.

15. to the division of criminal justice services, names and other
non-clinical identifying information for the sole purpose of
implementing the division's responsibilities and duties under sections
400.00 and 400.02 of the penal law.

16. to a mental health incident review panel, or members thereof,
established by the commissioner pursuant to section 31.37 of this title,
in connection with incident reviews conducted by such panel.

17. to the agency designated by the governor pursuant to subdivision
(b) of section 558 of the executive law to provide protection and
advocacy services and administer the protection and advocacy system as
provided for by federal law. Such agency shall not be charged any fee
for copies of records obtained from a facility under this article.

18. to the board of correction of the city of New York when such board
has requested such information with respect to the death of a named
person, or, with the consent of a patient or client when such board has
requested information about the patient or client providing that such
board requires such information in the exercise of its functions, powers
and duties. Information, books, records or data which are confidential
as provided by law shall be kept confidential by the board of correction
of the city of New York and any limitation on the release thereof
imposed by law upon the party furnishing the information, books, records
or data shall apply to the board of correction of the city of New York.

* (d) Nothing in this section shall prevent the electronic or other
exchange of information concerning patients or clients, including
identification, between and among (i) facilities or others providing
services for such patients or clients pursuant to an approved local
services plan, as defined in article forty-one of this chapter, or
pursuant to agreement with the department, and (ii) the department or
any of its licensed or operated facilities. Neither shall anything in
this section prevent the exchange of information concerning patients or
clients, including identification, between facilities and managed care
organizations, behavioral health organizations, health homes or other
entities authorized by the department or the department of health to
provide, arrange for or coordinate health care services for such
patients or clients who are enrolled in or receiving services from such
organizations or entities. Provided however, written patient or client
consent shall be obtained prior to the exchange of information where
required by 42 USC 290dd-2 as amended, and any regulations promulgated
thereunder. Furthermore, subject to the prior approval of the
commissioner of mental health, hospital emergency services licensed
pursuant to article twenty-eight of the public health law shall be
authorized to exchange information concerning patients or clients
electronically or otherwise with other hospital emergency services
licensed pursuant to article twenty-eight of the public health law
and/or hospitals licensed or operated by the office of mental health;
provided that such exchange of information is consistent with standards,
developed by the commissioner of mental health, which are designed to
ensure confidentiality of such information. Additionally, information so
exchanged shall be kept confidential and any limitations on the release
of such information imposed on the party giving the information shall
apply to the party receiving the information.

* NB Effective until June 30, 2027

* (d) Nothing in this section shall prevent the exchange of
information concerning patients or clients, including identification,
between (i) facilities or others providing services for such patients or
clients pursuant to an approved local services plan, as defined in
article forty-one, or pursuant to agreement with the department and (ii)
the department or any of its facilities. Neither shall anything in this
section prevent the exchange of information concerning patients or
clients, including identification, between facilities and managed care
organizations, behavioral health organizations, health homes or other
entities authorized by the department or the department of health to
provide, arrange for or coordinate health care services for such
patients or clients who are enrolled in or receiving services from such
organizations or entities. Provided however, written patient or client
consent shall be obtained prior to the exchange of information where
required by 42 USC 290dd-2 as amended, and any regulations promulgated
thereunder. Information so exchanged shall be kept confidential and any
limitations on the release of such information imposed on the party
giving the information shall apply to the party receiving the
information.

* NB Effective June 30, 2027

(e) Clinical information tending to identify patients or clients and
clinical records maintained at a facility not operated by the offices,
shall not be a public record and shall not be released to any person or
agency outside such facility except pursuant to subdivisions (b), (c)
and (d) of this section. The director of such a facility may consent to
the release of such information and records, subject to regulation by
the commissioner, pursuant to the exceptions stated in subdivision (c)
of this section; provided that, for the purpose of this subdivision,
such consent shall be deemed to be the consent otherwise required of the
commissioner pursuant to subdivision (c) of this section. Nothing in
this subdivision shall be construed to limit, restrict or otherwise
affect access to such clinical information or records by the mental
hygiene legal service, the commission on quality of care for the
mentally disabled or the offices when such access is authorized
elsewhere in law.

(f) All records of identity, diagnosis, prognosis, treatment, care
coordination or any other information contained in a patient or client's
record shall be confidential unless disclosure is permitted under
subdivision (c) of this section. Any disclosure made pursuant to this
section shall be limited to that information necessary and required in
light of the reason for disclosure. Information so disclosed shall be
kept confidential by the party receiving such information and the
limitations on disclosure in this section shall apply to such party.
Except for disclosures made to the mental hygiene legal service, to
persons reviewing information or records in the ordinary course of
insuring that a facility is in compliance with applicable quality of
care standards, or to governmental agents requiring information
necessary for payments to be made to or on behalf of patients or clients
pursuant to contract or in accordance with law, a notation of all such
disclosures shall be placed in the clinical record of that individual
who shall be informed of all such disclosures upon request; provided,
however, that for disclosures made to insurance companies licensed
pursuant to the insurance law, such a notation need only be entered at
the time the disclosure is first made.