Utah Code § 26B-2-246

Medical record access for children
Open in Lexace · Ask the AI about this section
(1) As used in this section:
(a) "Child" means an individual under the age of 18 years old.

(b) "Electronic medical record system" means an electronic system for maintaining medical
records in a clinical setting.
(c) "EMRS vendor" means the vendor of an electronic medical record management system.
(d) "Health care system" means an entity that owns two or more health care facilities.
(e) "HIPAA" means the Health Insurance Portability and Accountability Act of 1996, Pub. L. No.
104-191, 110 Stat. 1936, as amended.
(f) "Parent" means an individual who has a parent-child relationship, as defined in Section
81-5-102, with the child.
(2) A parent has the right to obtain and access the medical records that pertain to the parent's child
unless:
(a) the parent's parental rights have been terminated;
(b) the child is emancipated or legally married;
(c) required by a court order; or
(d) the medical record relates to sexual assault counseling in accordance with Section
77-38-204.
(3)
(a) Subject to Subsection (3)(b), a health care facility may not restrict a parent's access to the
electronic medical record of the parent's child.
(b) A health care facility may:
(i) restrict a parent's access to an electronic medical record of the parent's child for a reason
described in Subsection (2); and
(ii) only restrict access to the portion of the electronic medical record that would be restricted
under Subsection (2).
(4) An EMRS vendor providing an electronic medical record system for a health care facility shall
ensure the electronic medical record system provided to the health care facility is capable of
being modified by the health care facility to comply with Subsection (3).
(5)
(a) Subject to Subsection (5)(f), a health care facility in violation of Subsection (3) is subject to a
$1,000 civil fine for each day the health care facility does not comply with Subsection (3) after
December 31, 2027.
(b) An EMRS vendor in violation of Subsection (4) is subject to a $1,000 civil fine for each day
the EMRS vendor's electronic medical record system does not comply with Subsection (4)
after December 31, 2027.
(c) The attorney general may bring a civil action against a health care facility or EMRS vendor to
enforce this section.
(d) In enforcing this section, the attorney general may issue subpoenas in investigating a
potential violation.
(e) A court shall award attorney fees to the attorney general if the attorney general is successful
in an enforcement action described in this section.
(f) If two or more health care facilities are owned by a health care system and not in compliance
with Subsection (3), the civil fine described in Subsection (5)(a) shall be assessed against the
health care system for each day of noncompliance as if the health care facilities were a single
health care facility.
(6)
(a) A health care facility shall:
(i) provide a notice to any parent that is unable to access a part of an electronic medical record
if:
(A) the electronic medical record system is unable to provide the parent access; and

(B) the parent is not otherwise precluded from access to the records under HIPAA or
Subsection (2); and
(ii) upon request, provide the parent medical records.
(b) A health care facility shall provide records under Subsection (6)(a):
(i) without charge; and
(ii) within five business days of the day on which the health care facility receives the request.
(c) A health care facility that fails to provide records in accordance with this Subsection (6) is
subject to a $1,000 civil fine per record.
(d) The notice described in Subsection (6)(a)(i) shall state the following "If your child's medical
records are not visible, click here to request them. They must be provided within five business
days or a $1,000 fine applies per Utah Code Section 26B-2-246."
(7) A fine collected under this section shall be deposited into the fund described in Section
26B-1-335.
(8) Subsections (3) through (7) do not apply to the Utah State Hospital.

‹ Prev All Utah sections Next ›


Lexace provides legal information, not legal advice, and no attorney–client relationship is created. Statute text is provided for general information and may not reflect the most recent amendments; verify against the official state code.