Health Records Confidentiality Act of 2002

Health Records Confidentiality Act of 2002 - Prohibits, except as outlined in this Act, health care providers, employers, and other named entities from: (1) disclosing "individually identifiable health information" to an entity for marketing the products or services of such entity; or (2) using individually identifiable health information in their possession to provide marketing service to any entity.

Defines "individually identifiable health information" as certain information created by or received from a health care provider or other named entities that relates to the physical or mental health of an individual, the provision of health care to the individual, or payment by the individual for health services and that identifies the individual or reasonably can be used to identify the individual. Defines "marketing."

Permits health care providers, employers, and other named entities to provide marketing services to a pharmaceutical company if: (1) clear notice is given to individuals regarding disclosure practices for individually identifiable health information; and (2) written consent from the individual involved is obtained applying to a specific marketing purpose.