Idaho Healthcare Compliance Requirements
State-specific breach notification rules, medical records retention periods, PDMP requirements, and mandatory reporting obligations for medical practices operating in Idaho.
Breach Notification Rules
Notification deadline
Most expedient time possible
Notification must be made in the most expedient time possible and without unreasonable delay, no later than 30 calendar days after discovery.
AG notification threshold
All breaches
Notify: AG
Harm analysis required
Penalty range
Up to $25,000 per violation
Medical Records Retention
| Record type | Retention period | Measured from |
|---|---|---|
| General medical | 10 years | Last treatment |
PDMP Requirements — Idaho Board of Pharmacy PMP
Check required
All controlled substances
Check frequency
Every prescription
Delegation allowed
Penalty range
Licensing board discipline; misdemeanor for willful noncompliance; fines up to $1,000
Exemptions
Hospice patients, ≤3 day supply in ER, inpatient hospital or nursing facility, cancer treatment
Mandatory Reporting Obligations
Mandated reporters
Physicians, nurses, dentists, psychologists, social workers, and all healthcare professionals
Report to
Department of Health and Welfare, Child Protection or local law enforcement
Timeline
Within 24 hours
Penalty for failure
Misdemeanor, up to 6 months jail and/or $1,000 fine
Immunity provision
Good faith reporters immune from civil and criminal liability under Idaho Code 16-1606
Mandated reporters
Physicians, nurses, and all healthcare professionals
Report to
Adult Protection Unit, Idaho Commission on Aging
Timeline
Within 24 hours
Penalty for failure
Misdemeanor, up to $1,000 fine
Immunity provision
Good faith reporters immune from civil and criminal liability
Mandated reporters
Healthcare providers treating injuries from suspected criminal activity
Report to
Local law enforcement
Timeline
Immediately / as soon as possible
Immunity provision
Good faith reporters immune from civil liability
Mandated reporters
Physicians, laboratories, and healthcare facility administrators
Report to
Idaho Department of Health and Welfare, Division of Public Health
Timeline
Within 24 hours
Penalty for failure
Misdemeanor, up to $1,000 fine
Immunity provision
Good faith reporters immune from civil liability
Mandated reporters
All healthcare providers treating gunshot wounds
Report to
Local law enforcement
Timeline
Immediately / as soon as possible
Penalty for failure
Misdemeanor
Immunity provision
Good faith reporters immune from civil and criminal liability
Stay compliant in Idaho
GuardWell tracks Idaho-specific breach deadlines, PDMP requirements, retention periods, and mandatory reporting obligations automatically.