Last Update: 04/05/2026 at 2:50 PM EST
Health Systems Tighten Privacy Notices
Coverage from Mass.gov, UMass Memorial Health, and others
Articles
4
Latest Article
02/16
Active Days
176
Executive Summary
Massachusetts and Maryland health providers updated HIPAA notices to explain PHI sharing, patient rights, breach alerts, and stricter protections for sensitive records
- UMass Memorial covers its OHCA members and physicians under one joint HIPAA privacy notice
- The notice allows PHI sharing for treatment, payment, operations, public health, law enforcement, and research
- UMass Memorial says it may use AI tools with human oversight and de-identified data
- Patients can access, amend, restrict, and opt out of certain disclosures, including HIE sharing
- UMass Memorial will notify patients of breaches and accepts complaints through its Privacy Office and HHS OCR
- DDS says it may share PHI for care, operations, payment, legal duties, public health, oversight, and research
- DDS gives extra protections to substance use and reproductive health information and retains records for at least 20 years
Quick Facts
- What: Updated HIPAA privacy notices on PHI use
- Where: Massachusetts Maryland and program service locations
- Why: To explain rights disclosures breach alerts and safeguards
- Who: UMass Memorial DDS Meritus and Revive Thrive
- When: Effective dates include February 16 2026 and September 1 2025
Coverage Timeline: 176 Days
Featured Article
Meritus Health publishes a HIPAA Notice of Privacy Practices detailing patient rights and permitted uses of medical records across its Maryland service locations.
Additional Articles
⭐⭐⭐⭐⭐
On February 16, 2026, Massachusetts Department of Developmental Services issued a revised HIPAA privacy notice in Massachusetts detailing client health information uses, disclosures, rights, and retention.
UMass Memorial Health issues a joint HIPAA privacy practices notice explaining how patient medical information is used, shared, and protected across its Massachusetts health care entities.
⭐️⭐️
Revive and Thrive issues a PHI privacy notice dated 09/01/2025 detailing use, disclosure, rights, and breach notification for program participants at service locations and online.