The facility shall ensure the confidentiality of client records, including information in a computerized medical record system, in accordance with the HIPAA Privacy Regulations (Title 45, Part 164, Subpart E of the Code of Federal Regulations) and any Mississippi state laws and regulations which provide a more stringent standard of confidentiality than the HIPAA Privacy Regulations. Information from or copies of records may be released only to authorized individuals, and the facility must ensure that unauthorized individuals cannot gain access to or alter client records. Original medical records shall not be released outside the facility unless under court order or subpoena or in order to safeguard the record in the event of a physical plant emergency or natural disaster.
15 Miss. Code. R. 16-1-4.14.2