Chapter 146

146.816(1)(b) (b) “Covered entity” has the meaning given in 45 CFR 160.103.

146.816(1)(c) (c) “Disclosure” has the meaning given in 45 CFR 160.103 and includes redisclosures and rereleases of information.

146.816(1)(d) (d) “Health care operations” has the meaning given in 45 CFR 164.501.

146.816(1)(e) (e) “Payment” has the meaning given in 45 CFR 164.501.

146.816(1)(f) (f) “Protected health information” has the meaning given in 45 CFR 160.103.

146.816(1)(g) (g) “Treatment” has the meaning given in 45 CFR 164.501.

146.816(1)(h) (h) “Treatment facility” has the meaning given in s. 51.01 (19).

146.816(1)(i) (i) “Use” has the meaning given in 45 CFR 160.103.

146.816(2) (2) Sections 51.30 (4) (a) and (e) and 146.82 and rules promulgated under s. 51.30 (12) do not apply to a use, disclosure, or request for disclosure of protected health information by a covered entity or its business associate that meets all the following criteria:

146.816(2)(a) (a) The covered entity or its business associate makes the use, disclosure, or request for disclosure in compliance with 45 CFR 164.500 to 164.534.

146.816(2)(b) (b) The covered entity or its business associate makes the use, disclosure, or request for disclosure in any of the following circumstances:

146.816(2)(b)1. 1. For purposes of treatment.

146.816(2)(b)2. 2. For purposes of payment.

146.816(2)(b)3. 3. For purposes of health care operations.

146.816(2)(b)4. 4. For purposes of disclosing information about a patient in a good faith effort to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

146.816(2)(b)5. 5. For purposes of disclosing under s. 175.32 any threat made by a patient regarding violence in or targeted at a school in a good faith effort to prevent or lessen a serious and imminent threat to the health or safety of a student or school employee or the public.

146.816(3) (3) A covered entity that is a treatment facility shall comply with the notice of privacy practices obligations under 45 CFR 164.520, including the obligation to include in plain language in the notice of privacy practices a statement of the individual’s rights with respect to protected health information and a brief description of how the individual may exercise those rights including the right to request restrictions on uses and disclosures of protected health information about the individual to carry out treatment, payment, or health care operations as provided in 45 CFR 164.522.

146.816(4) (4) The department shall make a comprehensive and accessible document written in commonly understood language that explains health information privacy rights available to all applicable health care facilities in the state and on the department’s Internet site.

146.816 History History: 2013 a. 238; 2017 a. 140, 143.

146.817 146.817 Preservation of fetal monitor tracings and microfilm copies.

146.817(1) (1) In this section, “fetal monitor tracing” means documentation of the heart tones of a fetus during labor and delivery of the mother of the fetus that are recorded from an electronic fetal monitor machine.

146.817(2) (2) 

146.817(2)(a) (a) Unless a health care provider has first made and preserved a microfilm copy of a patient’s fetal monitor tracing, the health care provider may delete or destroy part or all of the patient’s fetal monitor tracing only if 35 days prior to the deletion or destruction the health care provider provides written notice to the patient.

146.817(2)(b) (b) If a health care provider has made and preserved a microfilm copy of a patient’s fetal monitor tracing and if the health care provider has deleted or destroyed part or all of the patient’s fetal monitor tracing, the health care provider may delete or destroy part or all of the microfilm copy of the patient’s fetal monitor tracing only if 35 days prior to the deletion or destruction the health care provider provides written notice to the patient.

146.817(2)(c) (c) The notice specified in pars. (a) and (b) shall be sent to the patient’s last-known address and shall inform the patient of the imminent deletion or destruction of the fetal monitor tracing or of the microfilm copy of the fetal monitor tracing and of the patient’s right, within 30 days after receipt of notice, to obtain the fetal monitor tracing or the microfilm copy of the fetal monitor tracing from the health care provider.

146.817(2)(d) (d) The notice requirements under this subsection do not apply after 5 years after a fetal monitor tracing was first made.

146.817 History History: 1987 a. 27, 399, 403.

146.819 146.819 Preservation or destruction of patient health care records.

146.819(1) (1) Except as provided in sub. (4), any health care provider who ceases practice or business as a health care provider or the personal representative of a deceased health care provider who was an independent practitioner shall do one of the following for all patient health care records in the possession of the health care provider when the health care provider ceased business or practice or died:

146.819(1)(a) (a) Provide for the maintenance of the patient health care records by a person who states, in writing, that the records will be maintained in compliance with ss. 146.81 to 146.835.

146.819(1)(b) (b) Provide for the deletion or destruction of the patient health care records.

146.819(1)(c) (c) Provide for the maintenance of some of the patient health care records, as specified in par. (a), and for the deletion or destruction of some of the records, as specified in par. (b).

146.819(2) (2) If the health care provider or personal representative provides for the maintenance of any of the patient health care records under sub. (1), the health care provider or personal representative shall also do at least one of the following:

146.819(2)(a) (a) Provide written notice, by 1st class mail, to each patient or person authorized by the patient whose records will be maintained, at the last-known address of the patient or person, describing where and by whom the records shall be maintained.

146.819(2)(b) (b) Publish, under ch. 985, a class 3 notice in a newspaper that is published in the county in which the health care provider’s or decedent’s health care practice was located, specifying where and by whom the patient health care records shall be maintained.

146.819(3) (3) If the health care provider or personal representative provides for the deletion or destruction of any of the patient health care records under sub. (1), the health care provider or personal representative shall also do at least one of the following:

146.819(3)(a) (a) Provide notice to each patient or person authorized by the patient whose records will be deleted or destroyed, that the records pertaining to the patient will be deleted or destroyed. The notice shall be provided at least 35 days prior to deleting or destroying the records, shall be in writing and shall be sent, by 1st class mail, to the last-known address of the patient to whom the records pertain or the last-known address of the person authorized by the patient. The notice shall inform the patient or person authorized by the patient of the date on which the records will be deleted or destroyed, unless the patient or person retrieves them before that date, and the location where, and the dates and times when, the records may be retrieved by the patient or person.

146.819(3)(b) (b) Publish, under ch. 985, a class 3 notice in a newspaper that is published in the county in which the health care provider’s or decedent’s health care practice was located, specifying the date on which the records will be deleted or destroyed, unless the patient or person authorized by the patient retrieves them before that date, and the location where, and the dates and times when, the records may be retrieved by the patient or person.

146.819(4) (4) This section does not apply to a health care provider that is any of the following:

146.819(4)(a) (a) A community-based residential facility or nursing home licensed under s. 50.03.

146.819(4)(b) (b) A hospital approved under s. 50.35.

146.819(4)(c) (c) A hospice licensed under s. 50.92.

146.819(4)(d) (d) A home health agency licensed under s. 50.49 (4).

146.819(4)(f) (f) A local health department, as defined in s. 250.01 (4), that ceases practice or business and transfers the patient health care records in its possession to a successor local health department.

146.819 History History: 1991 a. 269; 1993 a. 27; 1999 a. 9.

146.819 Cross-reference Cross-reference: See also ch. Med 21, Wis. adm. code.

146.82 146.82 Confidentiality of patient health care records.

146.82(1) (1) Confidentiality. All patient health care records shall remain confidential. Patient health care records may be released only to the persons designated in this section or to other persons with the informed consent of the patient or of a person authorized by the patient. This subsection does not prohibit reports made in compliance with s. 253.12 (2), 255.40, or 979.01; records generated and disclosed to the controlled substances board pursuant to s. 961.385; testimony authorized under s. 905.04 (4) (h); or releases made for purposes of health care operations, as defined in 45 CFR 164.501, and as authorized under 45 CFR 164, subpart E.

146.82(2) (2) Access without informed consent.

146.82(2)(a) (a) Notwithstanding sub. (1), patient health care records shall be released upon request without informed consent in the following circumstances:

146.82(2)(a)1. 1. To health care facility staff committees, or accreditation or health care services review organizations for the purposes of conducting management audits, financial audits, program monitoring and evaluation, health care services reviews or accreditation.

146.82(2)(a)2. 2. To the extent that performance of their duties requires access to the records, to a health care provider or any person acting under the supervision of a health care provider or to a person licensed under s. 256.15, including medical staff members, employees or persons serving in training programs or participating in volunteer programs and affiliated with the health care provider, if any of the following is applicable:

146.82(2)(a)2.a. a. The person is rendering assistance to the patient.

146.82(2)(a)2.b. b. The person is being consulted regarding the health of the patient.

146.82(2)(a)2.c. c. The life or health of the patient appears to be in danger and the information contained in the patient health care records may aid the person in rendering assistance.

146.82(2)(a)2.d. d. The person prepares or stores records, for the purposes of the preparation or storage of those records.

146.82(2)(a)3. 3. To the extent that the records are needed for billing, collection or payment of claims.

146.82(2)(a)4. 4. Under a lawful order of a court of record.

146.82(2)(a)5. 5. In response to a written request by any federal or state governmental agency to perform a legally authorized function, including but not limited to management audits, financial audits, program monitoring and evaluation, facility licensure or certification or individual licensure or certification. The private pay patient, except if a resident of a nursing home, may deny access granted under this subdivision by annually submitting to a health care provider, other than a nursing home, a signed, written request on a form provided by the department. The provider, if a hospital, shall submit a copy of the signed form to the patient’s physician.

146.82(2)(a)6. 6. For purposes of research if the researcher is affiliated with the health care provider and provides written assurances to the custodian of the patient health care records that the information will be used only for the purposes for which it is provided to the researcher, the information will not be released to a person not connected with the study, and the final product of the research will not reveal information that may serve to identify the patient whose records are being released under this paragraph without the informed consent of the patient. The private pay patient may deny access granted under this subdivision by annually submitting to the health care provider a signed, written request on a form provided by the department.

146.82(2)(a)7. 7. To an elder-adult-at-risk agency designated under s. 46.90 (2) or other investigating agency under s. 46.90 for purposes of s. 46.90 (4) and (5) or to an adult-at-risk agency designated under s. 55.043 (1d) for purposes of s. 55.043. The health care provider may release information by initiating contact with the elder-adult-at-risk agency or adult-at-risk agency without receiving a request for release of the information from the elder-adult-at-risk agency or adult-at-risk agency.

146.82(2)(a)8. 8. To the department under s. 255.04 and to the persons specified under s. 255.04 (3). The release of a patient health care record under this subdivision shall be limited to the information prescribed by the department under s. 255.04 (2).

146.82(2)(a)9. 9.

146.82(2)(a)9.a. a. In this subdivision, “abuse” has the meaning given in s. 51.62 (1) (ag); “neglect” has the meaning given in s. 51.62 (1) (br); and “parent” has the meaning given in s. 48.02 (13), except that “parent” does not include the parent of a minor whose custody is transferred to a legal custodian, as defined in s. 48.02 (11), or for whom a guardian is appointed under s. 48.9795 or 54.10 or s. 880.33, 2003 stats.

146.82(2)(a)9.b. b. Except as provided in subd. 9. c. and d., to staff members of the protection and advocacy agency designated under s. 51.62 (2) or to staff members of the private, nonprofit corporation with which the agency has contracted under s. 51.62 (3) (a) 3., if any, for the purpose of protecting and advocating the rights of a person with developmental disabilities, as defined under s. 51.62 (1) (am), who resides in or who is receiving services from an inpatient health care facility, as defined under s. 51.62 (1) (b), or a person with mental illness, as defined under s. 51.62 (1) (bm).

146.82(2)(a)9.c. c. If the patient, regardless of age, has a guardian appointed under s. 48.9795 or 54.10 or s. 880.33, 2003 stats., or if the patient is a minor with developmental disability, as defined in s. 51.01 (5) (a), who has a parent or has a guardian appointed under s. 48.831 and does not have a guardian appointed under s. 48.9795 or 54.10 or s. 880.33, 2003 stats., information concerning the patient that is obtainable by staff members of the agency or nonprofit corporation with which the agency has contracted is limited, except as provided in subd. 9. e., to the nature of an alleged rights violation, if any; the name, birth date and county of residence of the patient; information regarding whether the patient was voluntarily admitted, involuntarily committed or protectively placed and the date and place of admission, placement or commitment; and the name, address and telephone number of the guardian of the patient and the date and place of the guardian’s appointment or, if the patient is a minor with developmental disability who has a parent or has a guardian appointed under s. 48.831 and does not have a guardian appointed under s. 48.9795 or 54.10 or s. 880.33, 2003 stats., the name, address and telephone number of the parent or guardian appointed under s. 48.831 of the patient.

146.82(2)(a)9.d. d. Except as provided in subd. 9. e., any staff member who wishes to obtain additional information about a patient described in subd. 9. c. shall notify the patient’s guardian or, if applicable, parent in writing of the request and of the guardian’s or parent’s right to object. The staff member shall send the notice by mail to the guardian’s or, if applicable, parent’s address. If the guardian or parent does not object in writing within 15 days after the notice is mailed, the staff member may obtain the additional information. If the guardian or parent objects in writing within 15 days after the notice is mailed, the staff member may not obtain the additional information.

146.82(2)(a)9.e. e. The restrictions on information that is obtainable by staff members of the protection and advocacy agency or private, nonprofit corporation that are specified in subd. 9. c. and d. do not apply if the custodian of the record fails to promptly provide the name and address of the parent or guardian; if a complaint is received by the agency or nonprofit corporation about a patient, or if the agency or nonprofit corporation determines that there is probable cause to believe that the health or safety of the patient is in serious and immediate jeopardy, the agency or nonprofit corporation has made a good-faith effort to contact the parent or guardian upon receiving the name and address of the parent or guardian, the agency or nonprofit corporation has either been unable to contact the parent or guardian or has offered assistance to the parent or guardian to resolve the situation and the parent or guardian has failed or refused to act on behalf of the patient; if a complaint is received by the agency or nonprofit corporation about a patient or there is otherwise probable cause to believe that the patient has been subject to abuse or neglect by a parent or guardian; or if the patient is a minor whose custody has been transferred to a legal custodian, as defined in s. 48.02 (11) or for whom a guardian that is an agency of the state or a county has been appointed.

146.82(2)(a)10. 10. To persons as provided under s. 655.17 (7) (b), as created by 1985 Wisconsin Act 29, if the patient files a submission of controversy under s. 655.04 (1), 1983 stats., on or after July 20, 1985 and before June 14, 1986, for the purposes of s. 655.17 (7) (b), as created by 1985 Wisconsin Act 29.

146.82(2)(a)11. 11. To an agency, as defined in s. 48.981 (1) (ag), a sheriff or police department, or a district attorney for purposes of investigation of threatened or suspected child abuse or neglect or suspected unborn child abuse or for purposes of prosecution of alleged child abuse or neglect, if the person conducting the investigation or prosecution identifies the subject of the record by name. The health care provider may release information by initiating contact with an agency, sheriff or police department, or district attorney without receiving a request for release of the information. A person to whom a report or record is disclosed under this subdivision may not further disclose the report or record, except to the persons, for the purposes, and under the conditions specified in s. 48.981 (7).

146.82(2)(a)11m. 11m. To a court conducting a termination of parental rights proceeding under s. 48.42, to an agency, district attorney, corporation counsel or other appropriate official under s. 48.09 performing official duties relating to such a proceeding, or to the attorney or guardian ad litem for any party to such a proceeding for purposes of conducting, preparing for, or performing official duties relating to the proceeding, if that person identifies the subject of the record by name. A person to whom a report or record is disclosed under this subdivision may not further disclose the report or record, except for the purposes specified in this subdivision.

146.82(2)(a)12. 12. To a school district employee or agent, with regard to patient health care records maintained by the school district by which he or she is employed or is an agent, if any of the following apply:

146.82(2)(a)12.a. a. The employee or agent has responsibility for preparation or storage of patient health care records.

146.82(2)(a)12.b. b. Access to the patient health care records is necessary to comply with a requirement in federal or state law.

146.82(2)(a)13. 13. To persons and entities under s. 940.22.

146.82(2)(a)14. 14. To a representative of the board on aging and long-term care, in accordance with s. 49.498 (5) (e).

146.82(2)(a)15. 15. To the department under s. 48.60 (5) (c), 50.02 (5) or 51.03 (2) or to a sheriff, police department or district attorney for purposes of investigation of a death reported under s. 48.60 (5) (a), 50.035 (5) (b), 50.04 (2t) (b) or 51.64 (2).

146.82(2)(a)16. 16. To a designated representative of the long-term care ombudsman under s. 16.009 (4), for the purpose of protecting and advocating the rights of an individual 60 years of age or older who resides in a long-term care facility, as specified in s. 16.009 (4) (b), or an individual 60 years of age or older who is an enrollee of the family care program, the Family Care Partnership Program, the program of all-inclusive care for the elderly, or the self-directed services option.

146.82(2)(a)17. 17. To the department under s. 50.53 (2).

146.82(2)(a)18. 18. Following the death of a patient, to a coroner, deputy coroner, medical examiner or medical examiner’s assistant, for the purpose of completing a medical certificate under s. 69.18 (2) or investigating a death under s. 979.01 or 979.10. The health care provider may release information by initiating contact with the office of the coroner or medical examiner without receiving a request for release of the information and shall release information upon receipt of an oral or written request for the information from the coroner, deputy coroner, medical examiner or medical examiner’s assistant. The recipient of any information under this subdivision shall keep the information confidential except as necessary to comply with s. 69.18, 979.01 or 979.10.

146.82(2)(a)18m. 18m. If the subject of the patient health care records is a child or juvenile who has been placed in a foster home, group home, residential care center for children and youth, or juvenile correctional facility or in a supervised independent living arrangement, including a placement under s. 48.205, 48.21, 938.205, or 938.21, or for whom placement in a foster home, group home, residential care center for children and youth, or juvenile correctional facility or in a supervised independent living arrangement is recommended under s. 48.33 (4), 48.425 (1) (g), 48.837 (4) (c), or 938.33 (3) or (4), to an agency directed by a court to prepare a court report under s. 48.33 (1), 48.424 (4) (b), 48.425 (3), 48.831 (2), 48.837 (4) (c), or 938.33 (1), to an agency responsible for preparing a court report under s. 48.365 (2g), 48.425 (1), 48.831 (2), 48.837 (4) (c), or 938.365 (2g), to an agency responsible for preparing a permanency plan under s. 48.355 (2e), 48.38, 48.43 (1) (c) or (5) (c), 48.63 (4) or (5) (c), 48.831 (4) (e), 938.355 (2e), or 938.38 regarding the child or juvenile, to the foster parent of the child or juvenile or the operator of the group home, residential care center for children and youth, or juvenile correctional facility in which the child or juvenile is placed, or to an agency that placed the child or juvenile or arranged for the placement of the child or juvenile in any of those placements and, by any of those agencies, to any other of those agencies and, by the agency that placed the child or juvenile or arranged for the placement of the child or juvenile in any of those placements, to the foster parent of the child or juvenile or the operator of the group home, residential care center for children and youth, or juvenile correctional facility in which the child or juvenile is placed, as provided in s. 48.371 or 938.371.

146.82(2)(a)19. 19. To a procurement organization, as defined in s. 157.06 (2) (p), for the purpose of conducting an examination to ensure the medical suitability of a body part that is or could be the subject of an anatomical gift under s. 157.06.

146.82(2)(a)20. 20. If the patient health care records do not contain information and the circumstances of the release do not provide information that would permit the identification of the patient.

146.82(2)(a)21. 21. To a prisoner’s health care provider, the medical staff of a prison or jail in which a prisoner is confined, the receiving institution intake staff at a prison or jail to which a prisoner is being transferred or a person designated by a jailer to maintain prisoner medical records, if the disclosure is made with respect to a prisoner’s patient health care records under s. 302.388 or to the department of corrections if the disclosure is made with respect to a prisoner’s patient health care records under s. 302.388 (4).

146.82(2)(a)22. 22. By a person specified in subd. 21. to a correctional officer of the department of corrections who has custody of or is responsible for the supervision of a prisoner, to a person designated by a jailer to have custodial authority over a prisoner, or to a law enforcement officer or other person who is responsible for transferring a prisoner to or from a prison or jail, if the patient health care record indicates that the prisoner has a communicable disease and disclosure of that information is necessary for the health and safety of the prisoner or of other prisoners, of the person whom the information is disclosed, or of any employee of the prison or jail.

146.82(2)(c) (c) Notwithstanding sub. (1), patient health care records shall be released to appropriate examiners and facilities in accordance with s. 971.17 (2) (e), (4) (c), and (7) (c). The recipient of any information from the records shall keep the information confidential except as necessary to comply with s. 971.17.

146.82(2)(cm) (cm) Notwithstanding sub. (1), patient health care records shall be released, upon request, to appropriate persons in accordance with s. 980.031 (4) and to authorized representatives of the department of corrections, the department of health services, the department of justice, or a district attorney for use in the prosecution of any proceeding or any evaluation conducted under ch. 980, if the treatment records involve or relate to an individual who is the subject of the proceeding or evaluation. The court in which the proceeding under ch. 980 is pending may issue any protective orders that it determines are appropriate concerning records made available or disclosed under this paragraph. Any representative of the department of corrections, the department of health services, the department of justice, or a district attorney may disclose information obtained under this paragraph for any purpose consistent with any proceeding under ch. 980.

146.82(3) (3) Reports made without informed consent.

146.82(3)(a) (a) Notwithstanding sub. (1), a physician, a naturopathic doctor, a limited-scope naturopathic doctor, a physician assistant, or an advanced practice nurse prescriber certified under s. 441.16 (2) who treats a patient whose physical or mental condition in the physician’s, naturopathic doctor’s, limited-scope naturopathic doctor’s, physician assistant’s, or advanced practice nurse prescriber’s judgment affects the patient’s ability to exercise reasonable and ordinary control over a motor vehicle may report the patient’s name and other information relevant to the condition to the department of transportation without the informed consent of the patient.