{"data":{"id":"us-oh/ohio-rev.-code-3798.03","jurisdiction":"us-oh","citation":"Ohio Rev. Code § 3798.03","heading":"Duty of covered entities.","body":"(A) Subject to division (B) of this section, a covered entity shall do both of the following:\n(1) If an individual's protected health information is maintained by the covered entity in a designated record set, provide the individual or the individual's personal representative with access to that information in a manner consistent with 45 C.F.R. 164.524;\n(2) Implement and maintain appropriate administrative, technical, and physical safeguards to protect the privacy of protected health information in a manner consistent with 45 C.F.R. 164.530(c).\n(B) If a covered entity is a hybrid entity, this section applies only to the health care component of the covered entity.","path":["Title 37 Health-Safety-Morals","Chapter 3798 Protected Health Information"],"source_url":"https://codes.ohio.gov/ohio-revised-code/section-3798.03","current_through":"2012-09-10 (House Bill 487 - 129th General Assembly)","vintage":"","retrieved_at":"2026-09-14T19:24:35Z","sha256":"c0285002f37f7ee5bde74b1e22e6caca20ed9d0dd63575c74ec10c1f8c46cf7a","source_id":"us-oh","stale":false,"prev":"us-oh/ohio-rev.-code-3798.02","next":"us-oh/ohio-rev.-code-3798.04"},"notice":"GroundRules: Original legal text. Not legal advice."}