Find & Ask › Maryland › this rule
COMAR 10.07.05.15 — Maintenance of Records
MarylandregulationMaryland Department of Health, Office of Health Care Quality
What this rule requires your agency to do
- 1If the agency ceases operation, arrange to return records to the client or client representative with legal authority, or retain the records for the required retention period (§B).(COMAR 10.07.05.15 — Maintenance of Records)
- 2Establish and implement procedures ensuring records of discharged clients are completed no later than 30 days after discharge (§D(1)).(COMAR 10.07.05.15 — Maintenance of Records)
- 3Maintain a client's record for 5 years after discharge; for a client younger than 18, maintain the record until the client is 21 or for 5 years after the record is made, whichever is later, except as provided in Health-General Article §4-403 (§A).(COMAR 10.07.05.15 — Maintenance of Records)
- 4Maintain the privacy and confidentiality of a client's medical records; release records or information only with written consent of the client/representative or as permitted by Health-General Article, Title 4, Subtitle 3; and maintain and dispose of records in accordance with Health-General Article, Title 4, Subtitles 3 and 4 (§C).(COMAR 10.07.05.15 — Maintenance of Records)
- 5Establish and implement safeguards to protect clinical record information against loss, destruction, or illegal or unauthorized use (§D(2)).(COMAR 10.07.05.15 — Maintenance of Records)
Applies to: personal care
Requires the agency to retain client records for 5 years after discharge (longer for minors), to arrange for record disposition if it ceases operation, to maintain privacy and confidentiality and release records only with written consent or as permitted by law, and to complete discharged clients' records within 30 days and safeguard records against loss or unauthorized use. Framework topic: Records Retention & Confidentiality.
Regulatory information, not legal advice — always confirm against the cited official source. Verification reduces error; it does not certify compliance.