Health record rights in Kansas: what state law adds
In Kansas, as of October 3, 2026, we found no law on health data held outside HIPAA; copy rights go no further than HIPAA; you can opt out of the health information exchange; reproductive health, mental health, HIV and genetic records each have a specific confidentiality rule; you can sue only in a narrow case; breach notices need not cover medical or health insurance information; and we found no law on AI in care. Each answer below quotes, dates and links the law. There is no state total and no state rank.
Laws read · page updated
Not legal advice. This records what the law said on the date we read it. Laws and court orders change. Read the law itself, or ask a lawyer, before you rely on it. State laws add to the federal floor. The national score rates federal law and national infrastructure and does not change with these state profiles.
Can you sue if your records are misused?Only in a narrow case, such as a data breach or one kind of record. The laws below say which. Same answer in 31 of the 50 states, counting this one.
Federal law, mainly HIPAA, applies in every state; our US page explains it in plain English. Each answer below says what this state adds on top, with the law's name, citation, effective date, the words that matter and a link to the official page.
Do apps and wearables need your OK before sharing health data?
Federal floor: HIPAA does not cover most apps, wearables, websites or data brokers.
No law found We searched the official code and found none.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
The revisor site has no full-text search; terms were run as a site-restricted web search of ksrevisor.gov. Hits were HIPAA covered-entity rules (K.S.A. 65-6821 et seq.), not non-HIPAA holders.
How we searched (October 3, 2026): the official code search for consumer health data, sensitive data consent, consumer data privacy act. Agency pages checked: ag.ks.gov.
Second check by a separate agent: confirmed.
Do you get a copy faster or free in some cases?
Federal floor: HIPAA gives the provider 30 days, plus one 30-day extension, and allows a cost-based fee. We also count the federal information blocking rule (45 CFR Part 171).
No. A law is in force, but it adds nothing to HIPAA's terms.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Deadline is 30 days, equal to HIPAA. No defined free-copy case found. Free production after a lawsuit is a court remedy, not a defined free case. Fee caps are recorded only as facts.
Deadline in the law: 30 days (not shorter than HIPAA's 30).
Fee rule: K.S.A. 65-6836(b): providers may charge "upon the payment of charges not to exceed those established and updated not less than every two years by rules and regulations adopted by the state board of healing arts". The board regulation with amounts was not opened.
Fee rule: K.S.A. 65-6836(b): "Providers may charge for the reasonable cost of all duplications of health care record information which cannot be routinely duplicated on a standard photocopy machine."
Goes beyond the federal floor: no.
Health care records; provision of copies. K.S.A. 65-6836(b)
In force · effective · read October 3, 2026 · source(ksrevisor.gov)
copies of health care records shall be furnished to a patient, a patient's authorized representative or any other person or entity authorized by law to obtain or reproduce such records, within 30 days of the receipt of the authorization
Who it binds, in our words: "Health care provider" means any person licensed by the state board of healing arts.
Second check by a separate agent: confirmed.
Can you say no to sharing through a health information exchange (a network that passes records between doctors)?
Federal floor: HIPAA lets providers share records for treatment without asking you.
Opt-out. Your records go through the exchange unless you say no, and there is a published way to say no.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Records flow to approved HIOs unless the person asks in writing. KDHE publishes an online opt-out form. Emergency and legally required reporting are excepted. Rules for sensitive categories were not checked.
Set by state law.
Designated exchange: Approved health information organizations under the Kansas health information technology act (K.S.A. 65-6821 et seq.), overseen by KDHE; no HIO named on a state page opened.
Health information organizations; participation agreements; required notice. K.S.A. 65-6832(d)(4)
In force · effective · read October 3, 2026 · source(ksrevisor.gov)
the individual, or such individual's personal representative, has the right to request in writing that the individual's protected health information not be disclosed by the health information organization
Who it binds, in our words: Covered entities in participation agreements with approved health information organizations.
Second check by a separate agent: confirmed.
Are some sensitive records, like mental health or HIV, given extra rules?
These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available.
Reproductive health records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
The rule covers abortion reports to KDHE, not provider records. Subsection (f) keeps reporter and facility identity confidential. Court orders on the 2024 amendment were not checked.
Termination of human pregnancy; reports; confidentiality. K.S.A. 65-445(b)
In force · effective · read October 3, 2026 · source(ksrevisor.gov)
The report shall not include the names of the persons whose pregnancies were so terminated or upon whom an attempted abortion was performed.
Who it binds, in our words: Reports to the secretary of health and environment on pregnancies terminated.
Second check by a separate agent: disputed, then settled by the authors on October 3, 2026.
Mental health records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Disclosure needs written consent of the patient, guardian or parent, or fits a listed exception such as a court order. Willful violation is a class C misdemeanor.
Care and treatment act for mentally ill persons; disclosure of records. K.S.A. 59-2979(a)
In force · effective · read October 3, 2026 · source(ksrevisor.gov)
any treatment records or medical records of any patient or former patient that are in the possession of any district court or treatment facility shall be privileged and shall not be disclosed except
Who it binds, in our words: District courts and treatment facilities holding records of patients under the act.
Second check by a separate agent: disputed, then settled by a ruling drafted by an agent against the law's text and approved by the authors on October 3, 2026.
HIV records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Covers reported HIV and AIDS information. Disclosure is allowed with written consent, for statistics without identity, for public health, in a medical emergency, or in camera in a court case involving a minor.
AIDS and HIV reporting; confidentiality of information. K.S.A. 65-6002(d)
In force · effective · read October 3, 2026 · source(ksrevisor.gov)
information obtained through laboratory tests conducted by the department of health and environment relating to HIV or AIDS and persons suffering therefrom or infected therewith shall be confidential and shall not be disclosed or made public, upon subpoena or otherwise
Who it binds, in our words: Information reported to the secretary of health and environment and KDHE lab test information.
Second check by a separate agent: confirmed.
Genetic records
Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Health coverage issuers may not ask a person to disclose genetic test results. K.S.A. 44-1009 also bars employers from seeking genetic test information; its history note was not read.
Genetic screening or testing; prohibiting the use of. K.S.A. 40-2259(b)(2)
In force · effective · read October 3, 2026 · source(ksrevisor.gov)
require or request directly or indirectly any individual to reveal whether the individual or a member of the individual's family has obtained a genetic test or the results of the test
Who it binds, in our words: Insurers, HMOs and similar bodies offering hospital, medical or surgical expense coverage; not life, disability income or long-term care insurers.
Second check by a separate agent: confirmed.
Can you sue if your records are misused?
Only in a narrow case, such as a data breach or one kind of record. The laws below say which.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
The only private action found is narrow: suing to obtain record copies. No private action for unlawful disclosure found. Breach law is enforced by the AG or insurance commissioner.
Damages a court may award: None. Court awards costs and orders records produced without cost when refusal was without just cause.
Health care records; enforcement of act. K.S.A. 65-6836(c)
In force · effective · read October 3, 2026 · source(ksrevisor.gov)
Any health care provider, patient, authorized representative or any other entity authorized by law to obtain or reproduce such records may bring a claim or action to enforce the provisions of this section.
Who it binds, in our words: Copy requests to persons licensed by the state board of healing arts.
In force · effective · read October 3, 2026 · source(ksrevisor.gov)
For violations of this section, except as to insurance companies licensed to do business in this state, the attorney general is empowered to bring an action in law or equity to address violations of this section and for other relief that may be appropriate.
Who it binds, in our words: Persons conducting business in Kansas and government bodies holding personal information.
Second check by a separate agent: confirmed.
Must you be told if health data leaks in a breach?
No. The breach notice law covers neither medical nor health insurance information.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
Listed elements are SSN, driver's license or state ID number, and financial account or card number. No medical or health insurance data. Entities following a state or federal regulator's breach procedures are deemed compliant. Only credit bureaus get notice above 1,000 consumers.
Deadline to tell people: without unreasonable delay.
No duty found to tell the attorney general or a regulator.
A business that follows HIPAA's breach rules is treated as following this law.
In force · effective · read October 3, 2026 · source(ksrevisor.gov)
means a consumer's first name or first initial and last name linked to any one or more of the following data elements that relate to the consumer, when the data elements are neither encrypted nor redacted:
Who it binds, in our words: "Consumer" means an individual who is a resident of this state.
In force · effective · read October 3, 2026 · source(ksrevisor.gov)
Notice must be made in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement
Who it binds, in our words: A person that conducts business in this state, or a government, governmental subdivision or agency that owns or licenses computerized data that includes personal information.
Second check by a separate agent: confirmed.
Are there rules for AI used in your care?
The three rules we look for: you must be told when AI is used in your care; a licensed clinician decides, not AI alone; you can reach a human, or have a human review the decision. Each counts only if the law names health care or health coverage.
No law found We searched the official code and found none.
The researcher's note
Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.
SB 467 (2026, AI in medical necessity decisions) and SB 405 (2026, AI chatbots acting as health professionals) both show status Died on the legislature's site. No enacted Kansas AI health law found.
These public figures describe conditions that can affect whether people are able to use the rights above, such as health insurance and internet at home. They are not scored, not part of any answer, and not a reason for any answer. Each is the latest the source publishes for the state, checked against the publisher (the Census Bureau or the Bureau of Labor Statistics); grouped under the Healthy People 2030 social determinants of health.
Source and period on every row. Figures from DataSpine, each checked against its publisher. Not scored.
Figure
Value
Source and period
People under 65 without health insuranceHealth care access and quality
10.1%
Small Area Health Insurance Estimates, SAHIE 2024 (single-year model estimate)
Households with a computerHealth care access and quality
94.2%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households with a broadband internet subscriptionHealth care access and quality
87.9%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households with a smartphone and no other computerHealth care access and quality
9.7%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Median household incomeEconomic stability
$69,747 (2022 dollars)
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Unemployment rateEconomic stability
3.8%
Local Area Unemployment Statistics, December 2025, monthly, seasonally adjusted
Households without a vehicleNeighborhood and built environment
5.1%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
People who speak a language other than English at homeSocial and community context
11.8%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households of one person aged 65 or overSocial and community context
12.0%
American Community Survey 5-year, ACS 5-year, 2018 to 2022
Not shown: the number of people below the poverty line and the number with a bachelor's degree, which are available only as counts, and counts do not compare across states of different size.
Not shown yet, with no checked state figure: Medicare members who also have Medicaid; Medicaid enrollment; primary care supply; social vulnerability, income and jobs; people in nonmetro counties; social vulnerability, housing and transport; social vulnerability, household and minority themes.
Also recorded: a data broker registry
A fact, not part of any answer above. No law found We found no data broker registry law.
Another state
This study covers the 50 states and Washington, DC. It does not cover the US territories (Puerto Rico, Guam, the US Virgin Islands, the Northern Mariana Islands and American Samoa).
Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI
Health Record Rights Index by SuperTruth. Research by AI agents built on Anthropic's Claude, checked by a second agent and ruled by the authors; how we did it. Research tool, not legal advice. Text CC BY 4.0.
