Provider and payer groups have endorsed the goal of improving the integration of primary care and behavioral health across a variety of programs and settings. There is an interest in sharing patients' medical information, a goal that is permissible within Health Insurance Portability and Accountability Act of 1996 (HIPAA), but there are concerns about more restrictive state medical privacy laws. This article assesses whether a substantial number of state medical privacy laws are, or could be interpreted to be, more restrictive than HIPAA. Preliminary investigation found that in almost one third of the states (including large-population states such as Florida, Georgia, Massachusetts, New York, and Texas), primary care physicians (PCPs) may have difficulty accessing mental health treatment records without the patient's (or his/her guardian/conservator's) written consent. If a comprehensive legal analysis supports this conclusion, then those advocating integration of behavioral and primary care may need to consider seeking appropriate state legislative solutions.
This publication is part of the RAND external publication series. Many RAND studies are published in peer-reviewed scholarly journals, as chapters in commercial books, or as documents published by other organizations.
RAND is a nonprofit institution that helps improve policy and decisionmaking through research and analysis. RAND's publications do not necessarily reflect the opinions of its research clients and sponsors.