74.18.127 - Confidentiality of personal information, records -- Rules.

Confidentiality of personal information, records — Rules.

(1) Personal information and records obtained and retained by the department concerning applicants and eligible individuals are confidential, are not subject to public disclosure, and may be released only in accordance with law or with this provision.

     (2) The department shall adopt rules and develop contract language to safeguard the confidentiality of all personal information, including photographs and lists of names. Rules and contract language shall ensure that:

     (a) Specific safeguards are established to protect all current and future stored personal information;

     (b) Specific safeguards and procedures are established for the release of personal health information in accordance with the health insurance portability and accountability act of 1996, 45 C.F.R. 160 through 45 C.F.R. 164;

     (c) All applicants and eligible individuals and, as appropriate, those individuals' representatives, service providers, cooperating agencies, and interested persons are informed upon initial intake of the confidentiality of personal information and the conditions for accessing and releasing this information;

     (d) All applicants or their representatives are informed about the department's need to collect personal information and the policies governing its use, including: (i) Identification of the authority under which information is collected; (ii) explanation of the principal purposes for which the department intends to use or release the information; (iii) explanation of whether providing requested information to the department is mandatory or voluntary and the effects of not providing requested information; (iv) identification of those situations in which the department requires or does not require informed written consent of the individual before information may be released; and (v) identification of other agencies to which information is routinely released; and

     (e) An explanation of department policies and procedures affecting personal information will be provided at intake or on request to each individual in that individual's native language and in an appropriate format including but not limited to braille, audio recording, electronic media, or large print.

[2003 c 409 § 12.]

Notes: Findings -- 2003 c 409: See note following RCW 74.18.010.