Mississippi · state laws

Health record rights in Mississippi: what state law adds

In Mississippi, as of October 3, 2026, we found no law on health data held outside HIPAA; copy rights go no further than HIPAA; no rule on the health information exchange is in force; no specific rule for genetic records is in force, while reproductive health, mental health and HIV records each have one; you cannot sue under these laws; breach notices need not cover medical or health insurance information; and one of the three rules we look for on AI in care is in force. Each answer below quotes, dates and links the law. There is no state total and no state rank.

Laws read · page updated

Not legal advice. This records what the law said on the date we read it. Laws and court orders change. Read the law itself, or ask a lawyer, before you rely on it. State laws add to the federal floor. The national score rates federal law and national infrastructure and does not change with these state profiles.

The seven answers

Federal law, mainly HIPAA, applies in every state; our US page explains it in plain English. Each answer below says what this state adds on top, with the law's name, citation, effective date, the words that matter and a link to the official page.

Do apps and wearables need your OK before sharing health data?

Federal floor: HIPAA does not cover most apps, wearables, websites or data brokers.

No law found We searched the official code and found none.

The researcher's note

Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.

Searched 2023 to 2026 session measure lists on the legislature site. HB 1051 and SB 2015 (2026 privacy bills) died in committee. No consent rule for non-HIPAA health data found.

How we searched (October 3, 2026): the official code search for privacy, personal data, personal information, health information, health record, consumer health data, data broker, genetic. Agency pages checked: attorneygenerallynnfitch.com.

Second check by a separate agent: confirmed.

Do you get a copy faster or free in some cases?

Federal floor: HIPAA gives the provider 30 days, plus one 30-day extension, and allows a cost-based fee. We also count the federal information blocking rule (45 CFR Part 171).

No. A law is in force, but it adds nothing to HIPAA's terms.

The researcher's note

Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.

41-10-5 sets 30 days, equal to HIPAA. No free copy case found. 11-1-52 sets a per-page cap and defers to HIPAA. 2026 HB 75 (free copy for disability claims) died.

  • Deadline in the law: 30 days (not shorter than HIPAA's 30).
  • Fee rule: Miss. Code 11-1-52(1): "Twenty Dollars ($20.00) for pages one (1) through twenty (20); One Dollar ($1.00) per page for the next eighty (80) pages"; 50 cents per page after that; 10% postage and handling; $15 off-site retrieval. Binds medical providers, hospitals, nursing homes and other medical facilities.
  • Fee rule: Miss. Code 11-1-52(3): $25 cap for executing a medical record affidavit requested by the patient or representative.
  • Fee rule: Miss. Code 11-1-52(4): "In charging the fees authorized under subsection (1) of this section, the medical provider, hospital, nursing home or other medical facility shall comply with the federal Health Insurance Portability and Accountability Act".
  • Goes beyond the federal floor: no.
  1. Limitations on charges for photocopying patients' records. Miss. Code Ann. 11-1-52, as amended by 2006 HB 1235

    In force · effective · read October 3, 2026 · source (billstatus.ls.state.ms.us)

    Any medical provider or hospital or nursing home or other medical facility shall charge no more than the following amounts to patients or their representatives for photocopying any patient's records:

    Who it binds, in our words: Any medical provider or hospital or nursing home or other medical facility

  2. Board of Medical Licensure Rule 10.6, Release of Patient Records to Patient. 30 Miss. Admin. Code Pt. 2635, R. 10.6

    In force · effective · read October 3, 2026 · source (msbml.ms.gov)

    A licensee shall, upon request of authorized requesting party holding a written release and authorization, provide a copy of a patient's medical record to the authorized requesting party within a reasonable period of time.

    Who it binds, in our words: Persons licensed by the Mississippi State Board of Medical Licensure

  3. Medical and billing records to patient within 30 days. Miss. Code Ann. 41-10-5 (2022 SB 2725, ch. 435)

    In force · effective · read October 3, 2026 · source (billstatus.ls.state.ms.us)

    A health care provider or its agent(s), or both, shall provide medical records and billing records that are in their possession or custody to the patient who is the subject of the records or the patient's representative within thirty (30) days from the date a valid request

    Who it binds, in our words: Health care providers and their agents

Second check by a separate agent: disputed, then settled by a ruling drafted by an agent against the law's text and approved by the authors on October 3, 2026.

Federal floor: HIPAA lets providers share records for treatment without asking you.

Repealed or replaced No rule in force. The rule we found has been repealed or replaced.

The researcher's note

Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.

The 2014 act set repeal of the MS-HIN chapter on July 1, 2019. 2019 extension bills SB 2427 and HB 803 died. 2026 HB 534 (new statewide HIE, opt-out) died in Senate committee. No designated HIE found.

  • Set by state law.
  1. Health Information Technology Act (MS-HIN) automatic repealer. Miss. Code Ann. 41-119-21, as amended by 2014 HB 392

    Repealed or replaced · effective · read October 3, 2026 · source (billstatus.ls.state.ms.us)

    Sections 41-119-1 through 41-119-21 shall stand repealed on July 1,

    Who it binds, in our words: Mississippi Health Information Network (MS-HIN) and its board

Second check by a separate agent: confirmed.

Are some sensitive records, like mental health or HIV, given extra rules?

These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available.

Reproductive health records

Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.

The researcher's note

Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.

41-41-77 bars the health department from disclosing complication reports in a way that identifies the patient. Code section lookups for 2023 to 2026 show no measures affecting it.

  1. Abortion Complication Reporting Act, reports and confidentiality. Miss. Code Ann. 41-41-77, enacted by 2004 HB 1525

    In force · effective · read October 3, 2026 · source (billstatus.ls.state.ms.us)

    The department or an employee of the department shall not disclose to a person or entity outside the department the reports or the contents of the reports required under this section

    Who it binds, in our words: State Department of Health and its employees, for physician reports of abortion complications

Second check by a separate agent: confirmed.

Mental health records

Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.

The researcher's note

Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.

Release only on written authorization, court order, continued treatment, benefits or reporting needs, or a threat of violence. Code section lookups for 2024 to 2026 show no later measures.

  1. Confidentiality of hospital records and information; exceptions. Miss. Code Ann. 41-21-97, as amended by 2023 SB 2797

    In force · effective · read October 3, 2026 · source (billstatus.ls.state.ms.us)

    hospital records of and information pertaining to patients at treatment facilities or patients being treated by physicians, psychologists (as defined in Section 73-31-3(e)), licensed master social workers or licensed professional counselors shall be confidential and shall be released only:

    Who it binds, in our words: Treatment facilities, physicians, psychologists, licensed master social workers and licensed professional counselors

Second check by a separate agent: confirmed.

HIV records

Yes. A law in force has a specific rule on keeping these records confidential or on who may see them.

The researcher's note

Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.

41-23-1 names HIV/AIDS among reportable diseases. Code section lookups for 2001 to 2026 show no enacted measure after 2000. A health department rule also keeps STD and HIV records in secret files.

  1. Reporting of HIV/AIDS and Class 1 diseases; confidentiality of notification. Miss. Code Ann. 41-23-1, as amended by 2000 HB 1508

    In force · effective · read October 3, 2026 · source (billstatus.ls.state.ms.us)

    persons who receive notification of the infectious condition of an individual under this subsection and the rules established under this subsection shall hold such information in the strictest of confidence and privilege, shall not reveal the information to others

    Who it binds, in our words: Persons notified of an individual's HIV/AIDS or other Class 1 or Class 2 infection

Second check by a separate agent: confirmed.

Genetic records

No law found We searched the official code and found none.

The researcher's note

Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.

No statute or rule on confidentiality or disclosure of genetic records found. A Medicare supplement rule limits insurer requests and use of genetic information. 2006 HB 154, a genetic privacy bill, was only introduced.

How we searched (October 3, 2026): the official code search for genetic, DNA, genetic information, genetic test. Agency pages checked: attorneygenerallynnfitch.com.

Second check by a separate agent: confirmed.

Can you sue if your records are misused?

No. Only the attorney general or a regulator can enforce these laws.

The researcher's note

Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.

The breach law is enforced by the Attorney General and excludes a private right of action. No health records statute giving a person a right to sue was found.

  1. Breach notice law: enforcement by Attorney General only. Miss. Code Ann. 75-24-29(8), as amended by 2021 HB 277

    In force · effective · read October 3, 2026 · source (billstatus.ls.state.ms.us)

    nothing in this section may be construed to create a private right of action

    Who it binds, in our words: Any person who conducts business in this state and owns, licenses or maintains personal information of residents

Second check by a separate agent: confirmed.

Must you be told if health data leaks in a breach?

No. The breach notice law covers neither medical nor health insurance information.

The researcher's note

Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.

Data elements are SSN, driver's license, state or tribal ID number, and financial account numbers with codes. No medical or health insurance data. Deemed compliance applies to GLBA federal functional regulators, not HIPAA. AG notice bills died 2022 to 2026.

  • Deadline to tell people: without unreasonable delay.
  • No duty found to tell the attorney general or a regulator.
  1. Notice of breach of security involving personal information. Miss. Code Ann. 75-24-29(2)(b), as amended by 2021 HB 277

    In force · effective · read October 3, 2026 · source (billstatus.ls.state.ms.us)

    means an individual's first name or first initial and last name in combination with any one or more of the following data elements:

    Who it binds, in our words: Any person who conducts business in this state and who owns, licenses or maintains personal information of any resident of this state

Second check by a separate agent: confirmed.

Are there rules for AI used in your care?

The three rules we look for: you must be told when AI is used in your care; a licensed clinician decides, not AI alone; you can reach a human, or have a human review the decision. Each counts only if the law names health care or health coverage.

One of the three rules is in force. You must be told when AI is used in your care.

The researcher's note

Written by the research agent for our records, in the rulebook's shorthand. The answer above is the plain version.

Board rule lists AI use as an alternative therapy needing prior written informed consent. Date is the chapter adoption date shown. 2026 HB 1717 (clinician review, disclosure) died. 2024 SB 2140 has no AI terms.

  • You must be told when AI is used in your care: in force.
  • A licensed clinician decides, not AI alone: not found.
  • You can reach a human, or have a human review the decision: not found.
  1. Board of Medical Licensure Rule 13.4, Informed Consent for alternative therapies. 30 Miss. Admin. Code Pt. 2635, R. 13.4

    In force · effective · read October 3, 2026 · source (msbml.ms.gov)

    Licensees who choose to utilize alternative therapies must obtain written informed consent from the patient prior to the utilization of said therapies.

    Who it binds, in our words: Persons licensed by the Mississippi State Board of Medical Licensure

  2. Board of Medical Licensure Rule 13.2(B), definition naming AI as an alternative therapy. 30 Miss. Admin. Code Pt. 2635, R. 13.2(B)

    In force · effective · read October 3, 2026 · source (msbml.ms.gov)

    utilization of Artificial Intelligence, and stem cell therapy.

    Who it binds, in our words: Persons licensed by the Mississippi State Board of Medical Licensure

Second check by a separate agent: confirmed.

Rights in practice: the setting

These public figures describe conditions that can affect whether people are able to use the rights above, such as health insurance and internet at home. They are not scored, not part of any answer, and not a reason for any answer. Each is the latest the source publishes for the state, checked against the publisher (the Census Bureau or the Bureau of Labor Statistics); grouped under the Healthy People 2030 social determinants of health.

Source and period on every row. Figures from DataSpine, each checked against its publisher. Not scored.
FigureValueSource and period
People under 65 without health insuranceHealth care access and quality12.1%Small Area Health Insurance Estimates, SAHIE 2024 (single-year model estimate)
Households with a computerHealth care access and quality90.0%American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households with a broadband internet subscriptionHealth care access and quality80.0%American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households with a smartphone and no other computerHealth care access and quality17.0%American Community Survey 5-year, ACS 5-year, 2018 to 2022
Median household incomeEconomic stability$52,985 (2022 dollars)American Community Survey 5-year, ACS 5-year, 2018 to 2022
Unemployment rateEconomic stability3.7%Local Area Unemployment Statistics, December 2025, monthly, seasonally adjusted
Households without a vehicleNeighborhood and built environment6.1%American Community Survey 5-year, ACS 5-year, 2018 to 2022
People who speak a language other than English at homeSocial and community context4.0%American Community Survey 5-year, ACS 5-year, 2018 to 2022
Households of one person aged 65 or overSocial and community context12.1%American Community Survey 5-year, ACS 5-year, 2018 to 2022

Not shown: the number of people below the poverty line and the number with a bachelor's degree, which are available only as counts, and counts do not compare across states of different size.

Not shown yet, with no checked state figure: Medicare members who also have Medicaid; Medicaid enrollment; primary care supply; social vulnerability, income and jobs; people in nonmetro counties; social vulnerability, housing and transport; social vulnerability, household and minority themes.

Also recorded: a data broker registry

A fact, not part of any answer above. No law found We found no data broker registry law.

Another state

This study covers the 50 states and Washington, DC. It does not cover the US territories (Puerto Rico, Guam, the US Virgin Islands, the Northern Mariana Islands and American Samoa).

All 50 states and Washington, DC, question by question

Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI

Health Record Rights Index by SuperTruth. Research by AI agents built on Anthropic's Claude, checked by a second agent and ruled by the authors; how we did it. Research tool, not legal advice. Text CC BY 4.0.