Connecticut General Statutes Title 38A. Insurance § 38a-999. Written policies, standards and procedures re medical record information

(1) Limitation on access to medical record information by only those persons who need to use the medical record information in order to perform their jobs;

(2) Appropriate training for all employees identified in subdivision (4) of this subsection;

(3) Disciplinary measures for violations of the medical record information policies, standards and procedures;

(4) Identification of the job titles of persons that are authorized to use or disclose medical record information;

(5) Procedures for authorizing and restricting the collection, use or disclosure of medical record information;

(6) Methods for handling, disclosing, storing and disposing of medical record information;

(7) Periodic monitoring of the employees' compliance with the policies, standards and procedures in a manner sufficient for the insurance institution, agent or insurance support organization to determine compliance with this section and to enforce its policies, standards and procedures; and

(8) Additional protection against unauthorized disclosure of sensitive health information, which shall include information regarding: Sexually transmitted diseases; mental health; substance abuse; the human immunodeficiency virus and acquired immune deficiency syndrome; and genetic testing, including the fact that an individual has undergone a genetic test.