 |
ARIZONA STATE SENATE
Fifty-Seventh Legislature, Second Regular Session
AMENDED
candidate
petitions; felony disclosure
(NOW: releasing medical records; promptness)
Purpose
Requires a health care provider to provide a patient with access to, or copies of, the patient's medical records or payment records within specified timeframes after receiving a written request.
Background
A health care provider must provide a patient or the patient's health care decision maker with access to or copies of the patient's medical records and payment records on written request. A provider may deny access if a health professional determines that access is reasonably likely to endanger the life or physical safety of the patient or another person, cause substantial harm to another person, or reveal information obtained under a promise of confidentiality with someone other than a health professional, and access would be reasonably likely to reveal the source of the information. A provider may also deny access in circumstances related to clinical research or if the patient is an inmate and access would jeopardize safety, security, custody or rehabilitation within a correctional institution. If access is denied, the provider must document the reason a provide a written explanation and must release any portions of the record that are not subject to denial (A.R.S. § 12-2293).
There is no anticipated fiscal impact to the state General Fund associated with this legislation.
Provisions
1. Requires a health care provider to provide a patient with access to, or copies of, the patient's medical records or payment records within seven business days of receiving a written request.
2. Specifies that if the medical records or payment records request is made by a patient or the patient's health care decision maker and is for the purpose of upcoming medical treatment, a health care provider must respond to a request within:
a) 10 business days after receiving the request if the medical records are less than 12 months old and are maintained in the health care provider's current electronic health record system; or
b) 15 business days after receiving the request if the medical records are 12 months old or more and are maintained in the health care provider's current electronic health record system.
3. Specifies that the health care provider must respond to a medical records or payment records request within 30 days if the request is made for a purpose other than upcoming medical treatment, including:
a) litigation;
b) a request that is made by a patient for medical records that are not identified as necessary for upcoming medical treatment, including a request for personal copies of the patient's medical records when the medical records are otherwise available through a patient portal;
c) requests for the purposes of life insurance or life insurance underwriting;
d) requests from payors, unless otherwise specified in a contract between the provider and the payor;
e) requests from schools or educational institutions;
f) requests for records of a deceased patient; or
g) any other request that is not related to current or upcoming medical treatment.
4. Defines upcoming medical treatment as a scheduled or anticipated health care service or medical consultation for which the requested medical records are reasonably necessary to facilitate diagnosis, treatment or coordination of care.
5. Makes technical and conforming changes.
6. Becomes effective on the general effective date.
Amendments Adopted by Committee
1. Specifies that, if the medical records or payment records request is made by a patient or the patient's health care decision maker and is for the purpose of upcoming medical treatment, a health care provider must respond to a request within:
a) 10 business days after receiving the request if the medical records are less than 12 months old and are maintained in the health care provider's current electronic health record system; or
b) 15 business days after receiving the request if the medical records are 12 months old or more and are maintained in the health care provider's current electronic health record system.
2. Specifies that the health care provider must respond to a request within 30 days if the request is made for a specified purpose other than upcoming medical treatment.
4. Makes technical and conforming changes.
House Action Senate Action
JUD 2/18/26 DPA/SE 9-0-0-0 JUDE 2/25/26 DPA 5-2-0
3rd Read 3/4/26 37-16-6-0-1
Prepared by Senate Research
March 30, 2026
ZD/MY/ci