Minnesota e-Health Privacy & Security

The following are resources and guidance for Minnesota health care providers that may be used to enhance their privacy and security compliance programs.

Foundations in Privacy Toolkit
Developed by Gray Plant Mooty and funded by MDH, this toolkit is intended to help address many of the common legal and operational challenges of exchanging patient health information amongst different providers in Minnesota.

Minnesota Standard Consent Form to Release Health Information (PDF)
A standard patient consent form for a person to release their health information.

Q & A: Standard Consent Form to Release Health Information (PDF)
For general questions regarding the Minnesota Standard Consent Form to Release Health Information.

Spanish Language Version: Minnesota Standard Consent Form to Release Health Information (PDF)
Formulario de Permiso Estándar de Minnesota para la Divulgación de Información Médica.

Minnesota Model Notice of Privacy Practices (NPP) (PDF)
(Adapted for Minnesota from U.S. Department of Health and Human Services Model NPP)

Minnesota Model Notice of Privacy Practices (NPP) Microsoft Word Version for Health Care Providers' Use (DOC)

Summary of Proactive Monitoring Procedures for Secure Individual Identifiable Health Information (PDF)

Security Risk Analysis Tip Sheet (PDF)

HIPAA, Minnesota’s Health Records Act, and Psychotherapy Notes (PDF)

Privacy and Security Workgroup
Website of the Privacy and Security Workgroup of the Minnesota e-Health Initiative.

Minnesota Health Records Act
Minnesota law governing health records information, Minnesota Statutes 144.291 through 144.298.

Privacy and Consent Primer for County Attorneys (April 2017)
Minnesota Department of Health and partners developed a webinar to provide information to county attorneys on privacy and consent as it relates to e-health. Topics include relevant statutes and regulations around privacy and consent, public health, and minor health services. The webinar is recorded and available to county attorneys through the Minnesota County Attorney Association website (https://www.pathlms.com/mcaa). Local public health can review the webinar with their county attorney or review the Privacy and Consent Primer slides (PDF).

Upper Midwest HIE Interstate Patient Consent Tools
The Upper Midwest HIE (UM HIE) State Health Policy Consortium has developed a set of tools for health care providers designed to ease the exchange of patient health information, with consent, across state borders specifically for Minnesota, North Dakota, South Dakota, Wisconsin and Illinois. The Minnesota Commissioner of Health has endorsed these new tools and encourages health care providers to use the UM HIE Common Consent Form.

Related MDH Reports

Impacts and Costs of the Minnesota Health Records Act (2017) (PDF)

Minnesota Health Records Access Study (2013) (PDF)

Guide to Privacy and Security of Electronic Health Information
Released by the Office of the National Coordinator for Health Information Technology (ONC), April 2015.

Health Information Privacy
Health Information Privacy Resources from the U.S. Department of Health & Human Services (HHS).

HIPAA for Professionals
Information on the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Rules.