Title of Regulation: 12VAC35-115. Rules and Regulations to Assure the Rights of Individuals Receiving Services from Providers Licensed, Funded, or Operated by the Department of Mental Health, Mental Retardation and Substance Abuse Services (amending 12VAC35-115-10, 12VAC35-115-30, 12VAC35-115-50, 12VAC35-115-80).

Statutory Authority: §§ 37.2-203 and 37.2-400 of the Code of Virginia.

Effective Date: November 21, 2012.

Agency Contact: Margaret Walsh, Director, Office of Human Rights, Department of Behavioral Health and Developmental Services, Jefferson Building, 1220 Bank Street, 13th Floor, Richmond, VA 23219, telephone (804) 786-2008, FAX (804) 371-2308, or email margaret.walsh@dbhds.virginia.gov.

Summary:

The amendments are made pursuant to Chapters 111, 517, and 813 of the 2009 Acts of the Assembly and (i) change the name of the agency from the Department of Mental Health, Mental Retardation and Substance Abuse Services to the Department of Behavioral Health and Developmental Services and (ii) clarify that each person admitted to a hospital, training center, or other facility, or program operated, funded, or licensed by the department, is afforded the opportunity to have an individual of his choice notified of his general condition, location, and transfer to another facility.

Summary of Public Comments and Agency's Response: A summary of comments made by the public and the agency's response may be obtained from the promulgating agency or viewed at the office of the Registrar of Regulations.

CHAPTER 115
RULES AND REGULATIONS TO ASSURE THE RIGHTS OF INDIVIDUALS RECEIVING SERVICES FROM PROVIDERS LICENSED, FUNDED, OR OPERATED BY THE DEPARTMENT OF MENTAL HEALTH, MENTAL RETARDATION BEHAVIORAL HEALTH AND SUBSTANCE ABUSE DEVELOPMENTAL SERVICES

Part I
General Provisions

12VAC35-115-10. Authority and applicability.

A. The Code of Virginia authorizes these regulations to further define and protect the rights of individuals receiving services from providers of mental health, mental retardation, or substance abuse services in Virginia. The regulations require providers of services to take specific actions to protect the rights of each individual. The regulations establish remedies when rights are violated or in dispute, and provide a structure for support of these rights.

B. Providers subject to these regulations include:

1. Facilities operated by the department under Chapters 3 (§ 37.2-300 et seq.) and 7 (§ 37.2-700 et seq.) of Title 37.2 of the Code of Virginia;

2. Sexually violent predator programs established under § 37.2-909 of the Code of Virginia;

3. Community services boards that provide services under Chapter 5 (§ 37.2-500 et seq.) of Title 37.2 of the Code of Virginia;

4. Behavioral health authorities that provide services under Chapter 6 (§ 37.2-600 et seq.) of Title 37.2 of the Code of Virginia;

5. Public or private providers that operate programs or facilities licensed by the department under Article 2 (§ 37.2-403 et seq.) of Chapter 4 of Title 37.2 of the Code of Virginia except those operated by the Department of Corrections; and

6. Any other providers receiving funding from the department. Providers of services under Part C of the Individuals with Disabilities Education Act (IDEA), 20 USC §§ 1431-1444, that are subject to these regulations solely by receipt of Part C funds from or through the department shall comply with all applicable IDEA regulations found in 34 CFR Part 303 in lieu of these regulations.

C. Unless another law takes precedence, these regulations apply to all individuals who are receiving services from a public or private provider of services operated, licensed or funded by the Department of Mental Health, Mental Retardation Behavioral Health and Substance Abuse Developmental Services, except those operated by the Department of Corrections.

D. These regulations apply to individuals under forensic status and individuals committed to the custody of the department as sexually violent predators, except to the extent that the commissioner may determine these regulations are not applicable to them. The exemption must be in writing and based solely on the need to protect individuals receiving services, employees, or the general public. The commissioner shall give the State Human Rights Committee (SHRC) chairperson prior notice of all exemptions and provide the written exemption to the SHRC for its information. These exemptions shall be time limited and services shall not be compromised.

12VAC35-115-30. Definitions.

The following words and terms when used in this chapter shall have the following meanings, unless the context clearly indicates otherwise:

"Abuse" means any act or failure to act by an employee or other person responsible for the care of an individual in a facility or program operated, licensed, or funded by the department, excluding those operated by the Department of Corrections, that was performed or was failed to be performed knowingly, recklessly, or intentionally, and that caused or might have caused physical or psychological harm, injury, or death to a person receiving care or treatment for mental illness, mental retardation, or substance abuse. Examples of abuse include acts such as:

1. Rape, sexual assault, or other criminal sexual behavior;

2. Assault or battery;

3. Use of language that demeans, threatens, intimidates or humiliates the person;

4. Misuse or misappropriation of the person's assets, goods or property;

5. Use of excessive force when placing a person in physical or mechanical restraint;

6. Use of physical or mechanical restraints on a person that is not in compliance with federal and state laws, regulations, and policies, professionally accepted standards of practice, or the person's individualized services plan; and

7. Use of more restrictive or intensive services or denial of services to punish the person or that is not consistent with his individualized services plan. See § 37.2-100 of the Code of Virginia.

"Advance directive" means a document voluntarily executed in accordance with § 54.1-2983 of the Code of Virginia or the laws of another state where executed (§ 54.1-2993 of the Code of Virginia). This may include a wellness recovery action plan (WRAP) or similar document as long as it is executed in accordance with § 54.1-2983 of the Code of Virginia or the laws of another state. A WRAP or similar document may identify the health care agent who is authorized to act as the individual's substitute decision maker.

"Authorization" means a document signed by the individual receiving services or that individual's authorized representative that authorizes the provider to disclose identifying information about the individual. An authorization must be voluntary. To be voluntary, the authorization must be given by the individual receiving services or his authorized representative freely and without undue inducement, any element of force, fraud, deceit, or duress, or any form of constraint or coercion.

"Authorized representative" means a person permitted by law or these regulations to authorize the disclosure of information or to consent to treatment and services or participation in human research. The decision-making authority of an authorized representative recognized or designated under these regulations is limited to decisions pertaining to the designating provider. Legal guardians, attorneys-in-fact, or health care agents appointed pursuant to § 54.1-2983 of the Code of Virginia may have decision-making authority beyond such provider.

"Behavior intervention" means those principles and methods employed by a provider to help an individual to achieve a positive outcome and to address challenging behavior in a constructive and safe manner. Behavior management principles and methods must be employed in accordance with the individualized services plan and written policies and procedures governing service expectations, treatment goals, safety, and security.

"Behavioral treatment plan, functional plan, or behavioral support plan" means any set of documented procedures that are an integral part of the individualized services plan and are developed on the basis of a systematic data collection, such as a functional assessment, for the purpose of assisting an individual to achieve the following:

1. Improved behavioral functioning and effectiveness;

2. Alleviation of symptoms of psychopathology; or

3. Reduction of challenging behaviors.

"Board" means the State Mental Health, Mental Retardation Board of Behavioral Health and Substance Abuse Developmental Services Board.

"Caregiver" means an employee or contractor who provides care and support services; medical services; or other treatment, rehabilitation, or habilitation services.

"Commissioner" means the Commissioner of the Department of Mental Health, Mental Retardation Behavioral Health and Substance Abuse Developmental Services.

"Community services board" or "CSB" means the public body established pursuant to § 37.2-501 of the Code of Virginia that provides mental health, mental retardation, and substance abuse services to individuals within each city and county that established it. For the purpose of these regulations, community services board also includes a behavioral health authority established pursuant to § 37.2-602 of the Code of Virginia.

"Complaint" means an allegation of a violation of these regulations or a provider's policies and procedures related to these regulations.

"Consent" means the voluntary agreement of an individual or that individual's authorized representative to specific services.

Consent must be given freely and without undue inducement, any element of force, fraud, deceit, or duress, or any form of constraint or coercion. Consent may be expressed through any means appropriate for the individual, including verbally, through physical gestures or behaviors, in Braille or American Sign Language, in writing, or through other methods.

"Department" means the Department of Mental Health, Mental Retardation Behavioral Health and Substance Abuse Developmental Services.

"Director" means the chief executive officer of any provider delivering services. In organizations that also include services not covered by these regulations, the director is the chief executive officer of the services or services licensed, funded, or operated by the department.

"Discharge plan" means the written plan that establishes the criteria for an individual's discharge from a service and identifies and coordinates delivery of any services needed after discharge.

"Disclosure" means the release by a provider of information identifying an individual.

"Emergency" means a situation that requires a person to take immediate action to avoid harm, injury, or death to an individual or to others.

"Exploitation" means the misuse or misappropriation of the individual's assets, goods, or property. Exploitation is a type of abuse. (See § 37.2-100 of the Code of Virginia.) Exploitation also includes the use of a position of authority to extract personal gain from an individual. Exploitation includes violations of 12VAC35-115-120 (Work) and 12VAC35-115-130 (Research). Exploitation does not include the billing of an individual's third party payer for services. Exploitation also does not include instances of use or appropriation of an individual's assets, goods or property when permission is given by the individual or his authorized representative:

1. With full knowledge of the consequences;

2. With no inducements; and

3. Without force, misrepresentation, fraud, deceit, duress of any form, constraint, or coercion.

"Governing body of the provider" means the person or group of persons with final authority to establish policy. For the purpose of these regulations, the governing body of a CSB means the public body established according to Chapter 5 (§ 37.2-500 et seq.) or Chapter 6 (§ 37.2-600 et seq.) of Title 37.2 of the Code of Virginia, and shall include administrative policy community services boards, operating community services boards, local government departments with policy-advisory boards, and the board of a behavioral health authority.

"Habilitation" means the provision of individualized services conforming to current acceptable professional practice that enhance the strengths of, teach functional skills to, or reduce or eliminate challenging behaviors of an individual. These services occur in an environment that suits the individual's needs, responds to his preferences, and promotes social interaction and adaptive behaviors.

"Health care operations" means any activities of the provider to the extent that the activities are related to its provision of health care services. Examples include:

1. Conducting quality assessment and improvement activities, case management and care coordination, contacting of health care providers and patients with information about treatment alternatives, and related functions that do not include treatment;

2. Reviewing the competence or qualifications of health care professionals, evaluating practitioner and provider performance, and training, licensing or credentialing activities;

3. Conducting or arranging for medical review, legal services, and auditing functions, including fraud and abuse detection and compliance programs; and

4. Other activities contained within the definition of health care operations in the Standards for Privacy of Individually Identifiable Health Information, 45 CFR 164.501.

"Health plan" means an individual or group plan that provides or pays the cost of medical care, including any entity that meets the definition of "health plan" in the Standards for Privacy of Individually Identifiable Health Information, 45 CFR 160.103.

"Historical research" means the review of information that identifies individuals receiving services for the purpose of evaluating or otherwise collecting data of general historical significance. See 12VAC35-115-80 B (Confidentiality).

"Human research" means any systematic investigation, including research development, testing, and evaluation, utilizing human subjects, that is designed to develop or contribute to generalized knowledge. Human research shall not include research exempt from federal research regulations pursuant to 45 CFR 46.101(b).

"Human rights advocate" means a person employed by the commissioner upon recommendation of the State Human Rights Director to help individuals receiving services exercise their rights under this chapter. See 12VAC35-115-250 C.

"Individual" means a person who is receiving services. This term includes the terms "consumer," "patient," "resident," "recipient," and "client."

"Individualized services plan" or "ISP" means a comprehensive and regularly updated written plan that describes the individual's needs, the measurable goals and objectives to address those needs, and strategies to reach the individual's goals. An ISP is person-centered, empowers the individual, and is designed to meet the needs and preferences of the individual. The ISP is developed through a partnership between the individual and the provider and includes an individual's treatment plan, habilitation plan, person-centered plan, or plan of care.

"Informed consent" means the voluntary written agreement of an individual, or that individual's authorized representative to surgery, electroconvulsive treatment, use of psychotropic medications, or any other treatment or service that poses a risk of harm greater than that ordinarily encountered in daily life or for participation in human research. To be voluntary, informed consent must be given freely and without undue inducement, any element of force, fraud, deceit, or duress, or any form of constraint or coercion.

"Inspector general" means a person appointed by the Governor to provide oversight by inspecting, monitoring, and reviewing the quality of services that providers deliver.

"Investigating authority" means any person or entity that is approved by the provider to conduct investigations of abuse and neglect.

"Licensed professional" means a physician, licensed clinical psychologist, licensed professional counselor, licensed clinical social worker, licensed or certified substance abuse treatment practitioner, or certified psychiatric nurse specialist.

"Local Human Rights Committee" or "LHRC" means a group of at least five people appointed by the State Human Rights Committee. See 12VAC35-115-250 D for membership and duties.

"Neglect" means failure by a person, program, or facility operated, licensed, or funded by the department, excluding those operated by the Department of Corrections, responsible for providing services to do so, including nourishment, treatment, care, goods, or services necessary to the health, safety, or welfare of a person receiving care or treatment for mental illness, mental retardation, or substance abuse. See § 37.2-100 of the Code of Virginia.

"Next friend" means a person designated in accordance with 12VAC35-115-146 B to serve as the authorized representative of an individual who has been determined to lack capacity to consent or authorize the disclosure of identifying information, when required under these regulations.

"Peer-on-peer aggression" means a physical act, verbal threat or demeaning expression by an individual against or to another individual that causes physical or emotional harm to that individual. Examples include hitting, kicking, scratching, and other threatening behavior. Such instances may constitute potential neglect.

"Person centered" means focusing on the needs and preferences of the individual, empowering and supporting the individual in defining the direction for his life, and promoting self-determination, community involvement, and recovery.

"Program rules" means the operational rules and expectations that providers establish to promote the general safety and well-being of all individuals in the program and to set standards for how individuals will interact with one another in the program. Program rules include any expectation that produces a consequence for the individual within the program. Program rules may be included in a handbook or policies and shall be available to the individual.

"Protection and advocacy agency" means the state agency designated under the federal Protection and Advocacy for Individuals with Mental Illness (PAIMI) Act and the Developmental Disabilities (DD) Act. The protection and advocacy agency is the Virginia Office for Protection and Advocacy.

"Provider" means any person, entity, or organization offering services that is licensed, funded, or operated by the department.

"Psychotherapy notes" means comments recorded in any medium by a health care provider who is a mental health professional documenting and analyzing an individual or a group, joint, or family counseling session that are separated from the rest of the individual's health record. Psychotherapy notes shall not include annotations relating to medication and prescription monitoring, counseling session start and stop times, treatment modalities and frequencies, clinical test results, or any summary of any symptoms, diagnosis, prognosis, functional status, treatment plan, or the individual's progress to date.

"Research review committee" or "institutional review board" means a committee of professionals that provides complete and adequate review of research activities. The committee shall be sufficiently qualified through maturity, experience, and diversity of its members, including consideration of race, gender, and cultural background, to promote respect for its advice and counsel in safeguarding the rights and welfare of participants in human research. (See § 37.2-402 of the Code of Virginia and 12VAC35-180.)

"Restraint" means the use of a mechanical device, medication, physical intervention, or hands-on hold to prevent an individual from moving his body to engage in a behavior that places him or others at imminent risk. There are three kinds of restraints:

1. Mechanical restraint means the use of a mechanical device that cannot be removed by the individual to restrict the freedom of movement or functioning of a limb or a portion of an individual's body when that behavior places him or others at imminent risk.

2. Pharmacological restraint means the use of a medication that is administered involuntarily for the emergency control of an individual's behavior when that individual's behavior places him or others at imminent risk and the administered medication is not a standard treatment for the individual's medical or psychiatric condition.

3. Physical restraint, also referred to as manual hold, means the use of a physical intervention or hands-on hold to prevent an individual from moving his body when that individual's behavior places him or others at imminent risk.

"Restraints for behavioral purposes" means using a physical hold, medication, or a mechanical device to control behavior or involuntarily restrict the freedom of movement of an individual in an instance when all of the following conditions are met: (i) there is an emergency, (ii) nonphysical interventions are not viable, and (iii) safety issues require an immediate response.

"Restraints for medical purposes" means using a physical hold, medication, or mechanical device to limit the mobility of an individual for medical, diagnostic, or surgical purposes, such as routine dental care or radiological procedures and related postprocedure care processes, when use of the restraint is not the accepted clinical practice for treating the individual's condition.

"Restraints for protective purposes" means using a mechanical device to compensate for a physical or cognitive deficit when the individual does not have the option to remove the device. The device may limit an individual's movement, for example, bed rails or a gerichair, and prevent possible harm to the individual or it may create a passive barrier, such as a helmet to protect the individual.

"Restriction" means anything that limits or prevents an individual from freely exercising his rights and privileges.

"Seclusion" means the involuntary placement of an individual alone in an area secured by a door that is locked or held shut by a staff person, by physically blocking the door, or by any other physical or verbal means, so that the individual cannot leave it.

"Serious injury" means any injury resulting in bodily hurt, damage, harm, or loss that requires medical attention by a licensed physician.

"Services" means care, treatment, training, habilitation, interventions, or other supports, including medical care, delivered by a provider licensed, operated or funded by the department.

"Services record" means all written and electronic information that a provider keeps about an individual who receives services.

"State Human Rights Committee" or "SHRC" means a committee of nine members appointed by the board that is accountable for the duties prescribed in 12VAC35-115-250 E. See 12VAC35-115-250 E for membership and duties.

"State Human Rights Director" means the person employed by and reporting to the commissioner who is responsible for carrying out the functions prescribed in 12VAC35-115-250 F.

"Time out" means the involuntary removal of an individual by a staff person from a source of reinforcement to a different, open location for a specified period of time or until the problem behavior has subsided to discontinue or reduce the frequency of problematic behavior.

"Treatment" means the individually planned, sound, and therapeutic interventions that are intended to improve or maintain functioning of an individual receiving services delivered by providers licensed, funded, or operated by the department In order to be considered sound and therapeutic, the treatment must conform to current acceptable professional practice.

Part III
Explanation of Individual Rights and Provider Duties

12VAC35-115-50. Dignity.

A. Each individual has a right to exercise his legal, civil, and human rights, including constitutional rights, statutory rights, and the rights contained in these regulations, except as specifically limited herein. Each individual has a right to have services that he receives respond to his needs and preferences and be person-centered. Each individual also has the right to be protected, respected, and supported in exercising these rights. Providers shall not partially or totally take away or limit these rights solely because an individual has a mental illness, mental retardation, or substance use disorder and is receiving services for these conditions or has any physical or sensory condition that may pose a barrier to communication or mobility.

B. In receiving all services, each individual has the right to:

1. Use his preferred or legal name. The use of an individual's preferred name may be limited when a licensed professional makes the determination that the use of the name will result in demonstrable harm or have significant negative impact on the program itself or the individual's treatment, progress, and recovery. The director or his designee shall discuss the issue with the individual and inform the human rights advocate of the reasons for any restriction prior to implementation and the reasons for the restriction shall be documented in the individual's services record. The need for the restriction shall be reviewed by the team every month and documented in the services record.

2. Be protected from harm including abuse, neglect, and exploitation.

3. Have help in learning about, applying for, and fully using any public service or benefit to which he may be entitled. These services and benefits include educational or vocational services, housing assistance, services or benefits under Titles II, XVI, XVIII, and XIX of the Social Security Act, United States Veterans Benefits, and services from legal and advocacy agencies.

4. Have opportunities to communicate in private with lawyers, judges, legislators, clergy, licensed health care practitioners, authorized representatives, advocates, the inspector general, and employees of the protection and advocacy agency.

5. Be provided with general information about program services, policies, and rules in writing and in the manner, format and language easily understood by the individual.

6. Be afforded the opportunity to have an individual of his choice notified of his general condition, location, and transfer to another facility.

C. In services provided in residential and inpatient settings, each individual has the right to:

1. Have sufficient and suitable clothing for his exclusive use.

2. Receive nutritionally adequate, varied, and appetizing meals that are prepared and served under sanitary conditions, are served at appropriate times and temperatures, and are consistent with any individualized diet program.

3. Live in a humane, safe, sanitary environment that gives each individual, at a minimum:

a. Reasonable privacy and private storage space;

b. An adequate number of private, operating toilets, sinks, showers, and tubs that are designed to accommodate individuals' physical needs;

c. Direct outside air provided by a window that opens or by an air conditioner;

d. Windows or skylights in all major areas used by individuals;

e. Clean air, free of bad odors; and

f. Room temperatures that are comfortable year round and compatible with health requirements.

4. Practice a religion and participate in religious services subject to their availability, provided that such services are not dangerous to the individual or others and do not infringe on the freedom of others.

a. Religious services or practices that present a danger of bodily injury to any individual or interfere with another individual's religious beliefs or practices may be limited. The director or his designee shall discuss the issue with the individual and inform the human rights advocate of the reasons for any restriction prior to implementation. The reasons for the restriction shall be documented in the individual's services record.

b. Participation in religious services or practices may be reasonably limited by the provider in accordance with other general rules limiting privileges or times or places of activities.

5. Have paper, pencil and stamps provided free of charge for at least one letter every day upon request. However, if an individual has funds to buy paper, pencils, and stamps to send a letter every day, the provider does not have to pay for them.

6. Communicate privately with any person by mail and have help in writing or reading mail as needed.

a. An individual's access to mail may be limited only if the provider has reasonable cause to believe that the mail contains illegal material or anything dangerous. If so, the director or his designee may open the mail, but not read it, in the presence of the individual.

b. An individual's ability to communicate by mail may be limited if, in the judgment of a licensed professional, the individual's communication with another person or persons will result in demonstrable harm to the individual's mental health.

c. The director or his designee shall discuss the issue with the individual and inform the human rights advocate of the reasons for any restriction prior to implementation and the reasons for the restriction shall be documented in the individual's services record. The need for the restriction shall be reviewed by the team every month and documented in the services record.

7. Communicate privately with any person by telephone and have help in doing so. Use of the telephone may be limited to certain times and places to make sure that other individuals have equal access to the telephone and that they can eat, sleep, or participate in an activity without being disturbed.

a. An individual's access to the telephone may be limited only if, in the judgment of a licensed professional, communication with another person or persons will result in demonstrable harm to the individual or significantly affect his treatment.

b. The director or his designee shall discuss the issue with the individual and inform the human rights advocate of the reasons for any restriction prior to implementation and the reasons for the restriction shall be documented in the individual's services record. The need for the restriction shall be reviewed by the team every month and documented in the individual's services record.

c. Residential substance abuse services providers that are not inpatient hospital settings or crisis stabilization programs may develop policies and procedures that limit the use of the telephone during the initial phase of treatment when sound therapeutic practice requires restriction, subject to the following conditions:

(1) Prior to implementation and when it proposes any changes or revisions, the provider shall submit policies and procedures, program handbooks, or program rules to the LHRC and the human rights advocate for review and approval.

(2) When an individual applies for admission, the provider shall notify him of these restrictions.

8. Have or refuse visitors.

a. An individual's access to visitors may be limited or supervised only when, in the judgment of a licensed professional, the visits result in demonstrable harm to the individual or significantly affect the individual's treatment or when the visitors are suspected of bringing contraband or threatening harm to the individual in any other way.

b. The director or his designee shall discuss the issue with the individual and inform the human rights advocate of the reasons for any restriction prior to implementation and the restriction shall be documented in the individual's services record. The need for the restriction shall be reviewed by the team every month and documented in the individual's services record.

c. Residential substance abuse service providers that are not inpatient hospital settings or crisis stabilization programs may develop policies and procedures that limit visitors during the initial phase of treatment when sound therapeutic practice requires the restriction, subject to the following conditions:

(1) Prior to implementation and when proposing any changes or revisions, the provider shall submit policies and procedures, program handbooks, or program rules to the LHRC and the human rights advocate for review and approval.

(2) The provider shall notify individuals who apply for admission of these restrictions.

9. Nothing in these provisions shall prohibit a provider from stopping, reporting, or intervening to prevent any criminal act.

D. The provider's duties.

1. Providers shall recognize, respect, support, and protect the dignity rights of each individual at all times. In the case of a minor, providers shall take into consideration the expressed preferences of the minor and the parent or guardian.

2. Providers shall develop, carry out, and regularly monitor policies and procedures that assure the protection of each individual's rights.

3. Providers shall assure the following relative to abuse, neglect, and exploitation:

a. Policies and procedures governing harm, abuse, neglect, and exploitation of individuals receiving their services shall require that, as a condition of employment or volunteering, any employee, volunteer, consultant, or student who knows of or has reason to believe that an individual may have been abused, neglected, or exploited at any location covered by these regulations, shall immediately report this information directly to the director.

b. The director shall immediately take necessary steps to protect the individual until an investigation is complete. This may include the following actions:

(1) Direct the employee or employees involved to have no further contact with the individual. In the case of incidents of peer-on-peer aggression, protect the individuals from the aggressor in accordance with sound therapeutic practice and these regulations.

(2) Temporarily reassign or transfer the employee or employees involved to a position that has no direct contact with individuals receiving services.

(3) Temporarily suspend the involved employee or employees pending completion of an investigation.

c. The director shall immediately notify the human rights advocate and the individual's authorized representative. In no case shall notification be later than 24 hours after the receipt of the initial allegation of abuse, neglect, or exploitation.

d. In no case shall the director punish or retaliate against an employee, volunteer, consultant, or student for reporting an allegation of abuse, neglect, or exploitation to an outside entity.

e. The director shall initiate an impartial investigation within 24 hours of receiving a report of potential abuse or neglect. The investigation shall be conducted by a person trained to do investigations and who is not involved in the issues under investigation.

(1) The investigator shall make a final report to the director or the investigating authority and to the human rights advocate within 10 working days of appointment. Exceptions to this timeframe may be requested and approved by the department if submitted prior to the close of the sixth day.

(2) The director or investigating authority shall, based on the investigator's report and any other available information, decide whether the abuse, neglect or exploitation occurred. Unless otherwise provided by law, the standard for deciding whether abuse, neglect, or exploitation has occurred is preponderance of the evidence.

(3) If abuse, neglect or exploitation occurred, the director shall take any action required to protect the individual and other individuals. All actions must be documented and reported as required by 12VAC35-115-230.

(4) In all cases, the director shall provide his written decision, including actions taken as a result of the investigation, within seven working days following the completion of the investigation to the individual or the individual's authorized representative, the human rights advocate, the investigating authority, and the involved employee or employees. The decision shall be in writing and in the manner, format, and language that is most easily understood by the individual.

(5) If the individual affected by the alleged abuse, neglect, or exploitation or his authorized representative is not satisfied with the director's actions, he or his authorized representative, or anyone acting on his behalf, may file a petition for an LHRC hearing under 12VAC35-115-180.

f. The director shall cooperate with any external investigation, including those conducted by the inspector general, the protection and advocacy agency, or other regulatory or enforcement agencies.

g. If at any time the director has reason to suspect that an individual may have been abused or neglected, the director shall immediately report this information to the appropriate local Department of Social Services (see §§ 63.2-1509 and 63.2-1606 of the Code of Virginia) and cooperate fully with any investigation that results.

h. If at any time the director has reason to suspect that the abusive, neglectful or exploitive act is a crime, the director or his designee shall immediately contact the appropriate law-enforcement authorities and cooperate fully with any investigation that results.

4. Providers shall [ notify a person the individual chooses afford the individual the opportunity to have an individual of his choice notified ] of his general condition, location, and transfer to another facility.

12VAC35-115-80. Confidentiality.

A. Each individual is entitled to have all identifying information that a provider maintains or knows about him remain confidential. Each individual has a right to give his authorization before the provider shares identifying information about him or his care unless another state law or regulation, or these regulations specifically require or permit the provider to disclose certain specific information.

B. The provider's duties.

1. Providers shall maintain the confidentiality of any information that identifies an individual. If an individual's services record pertains in whole or in part to referral, diagnosis or treatment of substance use disorders, providers shall disclose information only according to applicable federal regulations (see 42 CFR Part 2, Confidentiality of Alcohol and Drug Abuse Patient Records).

2. Providers shall obtain and document in the individual's services record the individual's authorization or that of the authorized representative prior to disclosing any identifying information about him. The authorization must contain the following elements:

a. The name of the organization and the name or other specific identification of the person or persons or class of persons to whom disclosure is made;

b. A description of the nature of the information to be disclosed, the purpose of the disclosure, and an indication whether the authorization extends to the information placed in the individual's record after the authorization was given but before it expires;

c. An indication of the effective date of the authorization and the date the authorization will expire, or the event or condition upon which it will expire; and

d. The signature of the individual and the date. If the authorization is signed by an authorized representative, a description of the authorized representative's authority to act.

3. Providers shall tell each individual and his authorized representative about the individual's confidentiality rights. This shall include how information can be disclosed and how others might get information about the individual without his authorization. If a disclosure is not required by law, the provider shall give strong consideration to any objections from the individual or his authorized representative in making the decision to disclose information.

4. Providers shall prevent unauthorized disclosures of information from services records and shall maintain and disclose information in a secure manner.

5. In the case of a minor, the authorization of the custodial parent or other person authorized to consent to the minor's treatment under § 54.1-2969 is required, except as provided below:

a. Section 54.1-2969 E of the Code of Virginia permits a minor to authorize the disclosure of information related to medical or health services for a sexually transmitted or contagious disease, family planning or pregnancy, and outpatient care, treatment or rehabilitation for substance use disorders, mental illness, or emotional disturbance.

b. The concurrent authorization of the minor and custodial parent is required to disclose inpatient substance abuse records.

c. The minor and the custodial parent shall authorize the disclosure of identifying information related to the minor's inpatient psychiatric hospitalization when the minor is 14 years of age or older and has consented to the admission.

6. When providers disclose identifying information, they shall attach a statement that informs the person receiving the information that it must not be disclosed to anyone else unless the individual authorizes the disclosure or unless state law or regulation allows or requires further disclosure without authorization.

7. Providers may encourage individuals to name family members, friends, and others who may be told of their presence in the program and general condition or well-being. [ Providers shall notify a person of the individual's choice of the individual's general condition, location, and transfer to another facility upon the individual's oral or written request. ] Except for information governed by 42 CFR Part 2, providers may disclose to a family member, other relative, a close personal friend, or any other person identified by the individual, information that is directly relevant to that persons involvement with the individual's care or payment for his health care, if (i) the provider obtains the individual's agreement, (ii) the provider provides the individual with the opportunity to object to the disclosure, and (iii) the individual does not object or the provider reasonably infers for the circumstances, based or the exercise of professional judgment, that the individual does not object to the disclosure. If the opportunity to agree or object cannot be provided because of the individual's incapacity or an emergency circumstance, the provider may, in the exercise of professional judgment, determine whether the disclosure is in the best interest of the individual and, if so, disclose only the information that is directly relevant to the person's involvement with the individual's health care.

8. Providers may disclose the following identifying information without authorization or violation of the individual's confidentiality, but only under the conditions specified in the following subdivisions of this subsection. Providers should always consult 42 CFR Part 2, Confidentiality of Alcohol and Drug Abuse Patient Records, if applicable, because these federal regulations may prohibit some of the disclosures addressed in this section.

a. Emergencies: Providers may disclose information in an emergency to any person who needs that particular information for the purpose of preventing injury to or death of an individual or other person. The provider shall not disclose any information that is not needed for this specific purpose.

b. Providers or health plans: Providers may permit any full- or part-time employee, consultant, agent, or contractor of the provider to use identifying information or disclose to another provider, a health plan, the department, or a CSB, information required to give services to the individual or to get payment for the services.

c. Court proceedings: If the individual or someone acting for him introduces any aspect of his mental condition or services as an issue before a court, administrative agency, or medical malpractice review panel, the provider may disclose any information relevant to that issue. The provider may also disclose any records if they are properly subpoenaed, if a court orders them to be produced, or if involuntary admission or certification for admission is being proposed.

d. Legal counsel: Providers may disclose information to their own legal counsel or to anyone working on behalf of their legal counsel in providing representation to the provider. Providers of state-operated services may disclose information to the Office of the Attorney General or to anyone appointed by or working on behalf of that office in providing representation to the Commonwealth of Virginia.

e. Human rights committees: Providers may disclose to the LHRC and the SHRC any information necessary for the conduct of their responsibilities under these regulations.

f. Others authorized or required by the commissioner, CSB, or private program director: Providers may disclose information to other persons if authorized or required for the following activities:

(1) Licensing, human rights, or certification or accreditation reviews;

(2) Hearings, reviews, appeals, or investigations under these regulations;

(3) Evaluation of provider performance and individual outcomes (see §§ 37.2-508 and 37.2-608 of the Code of Virginia);

(4) Statistical reporting;

(5) Preauthorization, utilization reviews, financial and related administrative services reviews, and audits; or

(6) Similar oversight and review activities.

g. Preadmission screening, services, and discharge planning: Providers may disclose to the department, the CSB, or to other providers information necessary to screen individuals for admission or to prepare and carry out a comprehensive individualized services or discharge plan (see § 37.2-505 of the Code of Virginia).

h. Protection and advocacy agency: Providers may disclose information to the protection and advocacy agency in accordance with that agency's legal authority under federal and state law.

i. Historical research: Providers may disclose information to persons engaging in bona fide historical research if all of the following conditions are met:

(1) The request for historical research shall include, at a minimum, a summary of the scope and purpose of the research, a description of the product to result from the research and its expected date of completion, a rationale explaining the need to access otherwise private information, and the specific identification of the type and location of the records sought.

(2) The commissioner, CSB executive director, or private program director has authorized the research;

(3) The individual or individuals who are the subject of the disclosure are deceased;

(4) There are no known living persons permitted by law to authorize the disclosure; and

(5) The disclosure would in no way reveal the identity of any person who is not the subject of the historical research.

j. Protection of public safety: If an individual receiving services makes a specific threat to cause serious bodily injury or death to an identified or readily identifiable person and the provider reasonably believes that the individual has the intent and the ability to carry out the threat immediately or imminently, the provider may disclose those facts necessary to alleviate the potential threat.

k. Inspector General: Providers may disclose to the Inspector General any individual services records and other information relevant to the provider's delivery of services.

l. Virginia Patient Level Data System: Providers may disclose financial and services information to Virginia Health Information as required by law (see Chapter 7.2 (§ 32.1-276.2 et seq.) of Title 32.1 of the Code of Virginia).

m. Psychotherapy notes: Providers shall obtain an individual's authorization for any disclosure of psychotherapy notes, except when disclosure is made:

(1) For the provider's own training programs in which students, trainees, or practitioners in mental health are being taught under supervision to practice or improve their skills in group, joint, family or individual counseling;

(2) To defend the provider or its employees or staff against any accusation or wrongful conduct;

(3) In discharge of the provider's duty, in accordance with § 54.1-2400.1 B of the Code of Virginia, to take precautions to protect third parties from violent behavior or other serious harm;

(4) As required in the course of an investigation, audit, review, or proceeding regarding a provider's conduct by a duly authorized law-enforcement, licensure, accreditation, or professional review entity; or

(5) When otherwise required by law.

n. A law-enforcement official:

(1) Pursuant to a search warrant or grand jury subpoena;

(2) In response to their request, for the purpose of identifying or locating a suspect, fugitive, an individual required to register pursuant to § 9.1-901 of the Sex Offender and Crimes Against Minors Registry Act, material witness, or missing person, provided that only the following information is disclosed:

(a) Name and address of the individual;

(b) Date and place of birth of the individual;

(c) Social Security number of the individual;

(d) Blood type of the individual;

(e) Date and time of treatment received by the individual;

(f) Date and time of death of the individual;

(g) Description of distinguishing physical characteristics of the individual; and

(h) Type of injury sustained by the individual.

(3) Regarding the death of an individual for the purpose of alerting law enforcement of the death if the health care entity has a suspicion that such death may have resulted from criminal conduct; or

(4) If the health care entity believes in good faith that the information disclosed constitutes evidence of a crime that occurred on its premises.

o. Other statutes or regulations: Providers may disclose information to the extent required or permitted by any other state or law or regulation. See also § 32.1-127.1:03 of the Code of Virginia for a list of circumstances in which records may be disclosed without authorization.

9. Upon request, the provider shall tell the individual or his authorized representative the sources of information contained in his services records and provide a written listing of disclosures of information made without authorization, except for disclosures:

a. To employees of the department, CSB, the provider, or other providers;

b. To carry out treatment, payment, or health care operations;

c. That are incidental or unintentional disclosures that occur as a by-product of engaging in health care communications and practices that are already permitted or required;

d. To an individual or his authorized representative;

e. Pursuant to an authorization;

f. For national security or intelligence purposes;

g. To correctional institutions or law enforcement officials; or

h. That were made more that six years prior to the request.

10. The provider shall include the following information in the listing of disclosures of information provided to the individual or his authorized representative under subdivision 9 of this subsection:

a. The name of the person or organization that received the information and the address if known;

b. A brief description of the information disclosed; and

c. A brief statement of the purpose of the disclosure or, in lieu of such a statement, a copy of the written request for disclosure.

11. If the provider makes multiple disclosures of information to the same person or entity for a single purpose, the provider shall include the following:

a. The information required in subdivision 10 of this subsection for the first disclosure made during the requested period;

b. The frequency, periodicity, or number of disclosures made during the period for which the individual is requesting information; and

c. The date of the last disclosure during the time period.

12. If the provider makes a disclosure to a social service or protective services agency about an individual who the provider reasonably believes to be a victim of abuse or neglect, the provider is not required to inform the individual or his authorized representative of the disclosure if:

a. The provider, in the exercise of professional judgment, believes that informing the individual would place the individual at risk of serious harm; or

b. The provider would be informing the authorized representative, and the provider reasonably believes that the authorized representative is responsible for the abuse or neglect, and that informing such person would not be in the best interests of the individual.