D.C. Mun. Regs. r. 22-A3847
Each resident's record and any record maintained by the MHCRF that has information identifying a resident shall be confidential and maintained in a secure location at the MHCRF.
Disclosure and re-disclosure of information pertaining to a resident's mental health and a resident's access to his or her own records shall be governed by the Mental Health Information Act, HIPAA, and any other District or federal law or regulation governing mental health or other health records.
If a resident authorizes release of information to a third party, a copy of the resident's written authorization on the form prescribed by the Department shall be maintained in the resident's records and shall conform to the Mental Health Information Act and HIPAA.
D.C. Mun. Regs. r. 22-A3847