Michigan Healthcare Compliance Requirements

State-specific breach notification rules, medical records retention periods, PDMP requirements, and mandatory reporting obligations for medical practices operating in Michigan.

Expedient notification7-year retentionMAPS

Breach Notification Rules

Notification deadline

Most expedient time possible

Notification must be made without unreasonable delay. AG must be notified if breach affects 750+ Michigan residents.

AG notification threshold

750+ affected individuals

Notify: AG

Harm analysis required

Yes — breach presumed unless risk assessment shows low probability of compromise

Penalty range

Up to $250 per failure to disclose, max $750,000 per breach

Comparable to federal HIPAA
View statute

Medical Records Retention

Record typeRetention periodMeasured from
General medical7 yearsLast treatment
Pediatric7 yearsPatient turns 18

PDMP Requirements — MAPS

Check required

All controlled substances

Check frequency

Every prescription

Delegation allowed

Yes — authorized staff can check on provider's behalf

Penalty range

Licensing board discipline; administrative fines up to $5,000; possible misdemeanor charges

Exemptions

Hospice patients, cancer treatment, ≤3 day supply in ER, inpatient hospital or nursing facility, medication-assisted treatment

Mandatory Reporting Obligations

Mandated reporters

Physicians, dentists, nurses, psychologists, social workers, EMTs, and all licensed healthcare professionals

Report to

Department of Health and Human Services, Children's Protective Services

Timeline

Immediately / as soon as possible

Penalty for failure

Misdemeanor, up to 93 days jail and/or $500 fine; civil liability for damages

Immunity provision

Good faith reporters immune from civil and criminal liability under MCL 722.625

Mandated reporters

Physicians, nurses, social workers, and all healthcare professionals

Report to

Adult Protective Services, Department of Health and Human Services

Timeline

Immediately / as soon as possible

Penalty for failure

Misdemeanor, up to $500 fine

Immunity provision

Good faith reporters immune from civil and criminal liability

Mandated reporters

Healthcare providers when treating injuries from suspected domestic violence

Report to

Local law enforcement

Timeline

Immediately / as soon as possible

Immunity provision

Good faith reporters immune from civil liability

Mandated reporters

Physicians, laboratories, and healthcare facility administrators

Report to

Michigan Department of Health and Human Services, local health department

Timeline

Within 24 hours

Penalty for failure

Misdemeanor, up to $200 fine

Immunity provision

Good faith reporters immune from civil liability

Mandated reporters

All physicians and healthcare providers treating gunshot wounds or stab wounds

Report to

Local law enforcement

Timeline

Immediately / as soon as possible

Penalty for failure

Misdemeanor, up to 93 days jail

Immunity provision

Good faith reporters immune from civil and criminal liability

Stay compliant in Michigan

GuardWell tracks Michigan-specific breach deadlines, PDMP requirements, retention periods, and mandatory reporting obligations automatically.

GuardWell

Healthcare Compliance Assistant

Hi! I'm GuardWell's sales assistant.

I can answer questions about our healthcare compliance platform, pricing, and features. How can I help?

Powered by GuardWell AI