United States · compare states
Maryland and Montana: health record laws compared
Maryland and Montana, side by side on the seven questions, with the laws read October 3, 2026. They give different answers on getting a copy, breach notice and AI in care, and the same answer on everything else.
The seven questions, side by side
"Differs" marks a question where the answers are not the same; "same" marks one where they are. "Can't compare" means at least one answer was not checked; a not-checked answer is not a no. Where a question has a map, the small square shows the color each column has on it. Each citation opens that state's page, with the law quoted, dated and linked. There is no total and no rank: the questions are on different scales, and some have no best answer.
| Question | Maryland | Montana |
|---|---|---|
| Health data outside HIPAADo apps and wearables need your OK before sharing health data?same | Opt-in, for some businessesYes, at least for some businesses. A law in force requires your OK before they use or share your health data (opt-in).Md. Code, Commercial Law § 14-4707(a)(1)-(2); Ch. 454 of 2024, as amended by Ch. 874 of 2026; Md. Code, Commercial Law § 14-4702; Ch. 454 of 2024 | Opt-in, for some businessesYes, at least for some businesses. A law in force requires your OK before they use or share your health data (opt-in).Mont. Code Ann. 30-14-2812(2)(b); Mont. Code Ann. 30-14-2802(28)(a) |
| Getting a copyDo you get a copy faster or free in some cases?differs | Free copy in some casesIn one way: a free copy in at least one case.Md. Code, Health-General § 4-304(c)(5); Ch. 837 and Ch. 838 of 2024 | Faster: 10 daysIn one way: a deadline of 10 days, shorter than HIPAA's 30.Mont. Code Ann. 50-16-541(1); Mont. Code Ann. 50-16-540 |
| Health information exchangeCan you say no to sharing through a health information exchange (a network that passes records between doctors)?same | Opt-outOpt-out. Your records go through the exchange unless you say no, and there is a published way to say no.COMAR 10.25.18.03; COMAR 10.25.18.04A(2) | Opt-outOpt-out. Your records go through the exchange unless you say no, and there is a published way to say no.Big Sky Care Connect patient FAQ (HIE policy) |
| Are some sensitive records, like mental health or HIV, given extra rules? These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available. | ||
| Reproductive health recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Md. Code, Health-General § 4-302.5(b); Ch. 248 of 2023 | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Mont. Code Ann. 50-20-110(6) |
| Mental health recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Md. Code, Health-General § 4-307(c); last amended by Ch. 682 of 2018 | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Mont. Code Ann. 53-21-166; Mont. Code Ann. 50-16-546(1) |
| HIV recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Md. Code, Health-General § 18-201.1(d); Ch. 752 of 2024 | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Mont. Code Ann. 50-16-1009(1) |
| Genetic recordssame | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Md. Code, Commercial Law § 14-4404; Ch. 501 of 2022 | Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Mont. Code Ann. 30-23-104(2) |
| Right to sueCan you sue if your records are misused?same | Yes, in generalYes. You can sue over unlawful collection, use or sharing of medical records or health data in general.Md. Code, Health-General § 4-309(f); reenacted without amendment by Ch. 270 of 2000 | Yes, in generalYes. You can sue over unlawful collection, use or sharing of medical records or health data in general.Mont. Code Ann. 50-16-553(1); Mont. Code Ann. 50-16-1013(1) |
| Breach noticeMust you be told if health data leaks in a breach?differs | Medical and insurance dataYes. The breach notice law covers both medical information and health insurance information.Md. Code, Commercial Law § 14-3501(e)(1)(i)4-5; Ch. 502 of 2022; Md. Code, Commercial Law § 14-3504(b)(3), (h)(1); Ch. 502 of 2022 | One of the twoPartly. The breach notice law covers one of the two: medical information or health insurance information.Mont. Code Ann. 30-14-1704(4)(b)(i)(D); Mont. Code Ann. 30-14-1704(8) |
| AI in careAre there rules for AI used in your care?differs | 1 of 3 rulesOne of the three rules is in force. A licensed clinician decides, not AI alone.Md. Code, Insurance § 15-10B-05.1(c)(4); Ch. 747 of 2025; Md. Code, Insurance § 15-10A-06(a); phrase added by Ch. 747 of 2025 | No law foundWe searched the official code and found none.How we searched |
Not legal advice. This records what each law said on the date we read it. Laws and court orders change. State laws add to the federal floor. The United States score in the world index rates only federal law and national systems, so these state profiles do not change it.
Compare other states
All 50 states and Washington, DC, question by question
Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI
Health Record Rights Index by SuperTruth. Research tool, not legal advice. Our own words are CC BY 4.0; quoted law and source titles stay with their owners.