Michigan Health Privacy Rights

Access and Amendment: Michigan's Medical Records Access Act gives patients the right to obtain copies of their medical records and generally mirrors HIPAA's 30-day timeframe. One twist: certain mental health professionals (like social workers, psychologists) are excluded from the definition of "health care provider" in that state law, meaning their records might be governed by other rules (the Mental Health Code). But patients still have rights via HIPAA to access those unless a special exception applies. Michigan also mandates specific maximum fees for copying records by law.

Consent Requirements: Michigan has robust confidentiality provisions for specific cases – e.g., mental health records require patient consent or a court order for release (Mental Health Code § 330.1748). HIV test information requires consent for disclosure except to a few entities. So patients do hold additional consent rights for those categories.

Breach: Michigan's Identity Theft Protection Act includes health information in its breach notification rules, requiring notice to residents if certain personal data (including health insurance or medical info combined with name) is breached. Timing is without unreasonable delay (consistent with HIPAA, no stricter timeline explicitly).