District of Columbia Code Division I. Government of District. § 7-2071.07. Access to records; confidentiality.

(a) The Health Care Ombudsman may review the records of a health benefits plan, the HealthCare Alliance, or other provider, pertaining to a consumer or the consumer's medical records if the consumer or the consumer's legal representative has provided written consent. The confidentiality of the records shall be maintained by the Ombudsman Program in accordance with all federal and state confidentiality and disclosure laws.

(b) No information or records maintained by the program shall be disclosed to the public unless the consumer or the consumer's legal representative has consented in writing to the release of the information or records.

(c) Each District agency shall provide cooperation, assistance, and data to the Health Care Ombudsman, as requested and upon reasonable notice, necessary to enable the Ombudsman Program to investigate a consumer's complaint under applicable District or federal law.

(d) The Department shall enter into a “business associate” agreement with the Ombudsman Program that gives the program access to information about the Medicaid eligibility status of consumers whom it serves and requires the program to safeguard that information pursuant to the Health Insurance Portability and Accountability Act Privacy Regulation (45 C.F.R. Parts 160 and 164).