Ohio Revised Code Title LI. Public Welfare § 5160.48

(A) The medicaid director shall adopt rules under section 5160.02 of the Revised Code implementing sections 5160.45 to 5160.481 of the Revised Code and governing the custody, use, disclosure, and preservation of the information generated or received by the department of medicaid, county departments of job and family services, other state and county entities, contractors, grantees, private entities, or officials participating in the administration of medical assistance programs. The rules shall be adopted in accordance with Chapter 119. of the Revised Code. The rules may define who is an “authorized representative” for purposes of sections 5160.45 and 5160.46 of the Revised Code. The rules shall specify conditions and procedures for the release of information, which may include both of the following:

(B) The department of aging, when investigating a complaint under section 173.20 of the Revised Code, shall be granted any limited access permitted in the rules authorized by division (A)(1) of this section.

A contractor, grantee, or entity given access to information pursuant to the rules authorized by division (A)(2) of this section is bound by the director's rules. Disclosure of the information by the contractor, grantee, or entity in a manner not authorized by the rules is a violation of section 5160.45 of the Revised Code.