<?xml version="1.0"?>
<law><site_title>Virginia Decoded</site_title><site_url>https://vacode.org</site_url><law_id>77933</law_id><section_number>54.1-2404.2</section_number><catch_line>Health care providers; disclosure of records; actions for which an authorization is not required</catch_line><edition url="https://vacode.org/2025/" slug="2025" current="TRUE" last_updated="">2025</edition><structure><unit label="title" level="1" order_by="1" identifier="54.1">Professions and Occupations</unit><unit label="subtitle" level="2" order_by="1" identifier="III">Professions and Occupations Regulated by Boards Within the Department of Health Professions</unit><unit label="chapter" level="3" order_by="1" identifier="24">General Provisions</unit></structure><text>
						<section id="A"><p><span class="prefix-number">A.</span> Subject to any limitations set forth in an authorization for the disclosure of health records executed pursuant to &#xA7; <a class="law" title="Health records privacy" href="/32.1-127.1_03/">32.1-127.1:03</a> and the provisions of subsection F of &#xA7; <a class="law" title="Health records privacy" href="/32.1-127.1_03/">32.1-127.1:03</a>, every health care provider shall make health records, as defined in &#xA7; <a class="law" title="Health records privacy" href="/32.1-127.1_03/">32.1-127.1:03</a>, of a patient available to any person designated by a patient in an authorization to disclose health records pursuant to &#xA7; <a class="law" title="Health records privacy" href="/32.1-127.1_03/">32.1-127.1:03</a> to the same extent that such health records are required to be made available to the patient had the patient requested such health records. <a id="paragraph-279470" class="section-permalink" href="https://vacode.org/54.1-2404.2/#A"><i class="fa fa-link"/></a></p></section>
						<section id="B"><p><span class="prefix-number">B.</span> Every health care provider shall allow a spouse, parent, adult child, adult sibling, or other person identified by a patient to make an appointment for medical services on behalf of such patient, regardless of whether such patient has executed an authorization to disclose health records to such person pursuant to &#xA7; <a class="law" title="Health records privacy" href="/32.1-127.1_03/">32.1-127.1:03</a>; however, such health care provider shall not disclose protected health information to the person making the appointment for medical services on behalf of the patient unless the patient has executed an authorization to disclose health records pursuant to &#xA7; <a class="law" title="Health records privacy" href="/32.1-127.1_03/">32.1-127.1:03</a> or unless otherwise permitted or required to do so by federal or state <span class="dictionary">law</span> or regulations. Nothing in this subsection shall prevent a health care provider from sharing relevant protected health information related to the patient&#x2019;s health care or payment with a spouse, parent, adult child, adult sibling, or other person involved in the patient&#x2019;s health care or payment in accordance with 45 C.F.R. &#xA7; 164.510. <a id="paragraph-279471" class="section-permalink" href="https://vacode.org/54.1-2404.2/#B"><i class="fa fa-link"/></a></p></section></text><history>2022, c. 784.</history><metadata></metadata></law>
