US · guidance
CMS SOM App. J, Tag W113
§483.410(c)(3) The facility must develop and implement policies and procedures governing the
release of any client information, including consents necessary from the client, or parents (if
the client is a minor) or legal guardian.
Guidance §483.410(c)(3)
The facility develops and follows written policies governing the release of client information.
Release of any personally identifiable information does not occur unless consent(s) is obtained
prior to the release.
These policies must address at a minimum who must give consent for the release of information
from records. The policy and procedures should account for other situations involving the
release of client information, such as:
who should be notified when records have been released;
procedures to be followed with subpoenas;
time frames for providing requested information; and
information regarding a client’s HIV status may not be released without specific consent
and may not be in the record if that consent has not been given.
History
Rev. 135, Issued: 02-27-15, Effective: 04-27-15, Implementation: 04-27-15
Provenance
- Source
- cms.gov
- Retrieved
- 2026-07-22
- Edition
- som-2026-07-22
- Content hash
29e3c5577198264a2039df716482e22af13fd22c4c817667050aded470b3b77a
The link goes to the issuing authority’s own document — the one we read to produce this record. Where a source publishes whole titles rather than sections, your browser may need a moment to jump to the provision.
Unofficial copy of government-published law, reproduced from official sources with full provenance. Not an official publication; verify against official sources before relying on it in a filing. Records in the 'guidance' corpus, and only that corpus, are sub-regulatory (interpretive guidelines, survey procedures) and are not binding law. Validity bounds follow each jurisdiction's declared temporalBasis.