A bill for an act relating to a public entity’s purchase or collection of health information from an entity not subject to the federal Health Insurance Portability and Accountability Act.

This bill prohibits Iowa public agencies from purchasing or collecting health information from entities not covered by federal HIPAA privacy rules, regardless of whether individuals consented to share their data. It directly affects public agencies (like state or local government offices) by restricting their ability to obtain health data from non-HIPAA sources, such as private health apps or unregulated businesses. The key provision explicitly bans such data collection or purchase, defining "health information" using federal standards and "public agency" per Iowa law. The bill aims to limit government access to sensitive health data outside established federal privacy protections. It does not change individual privacy rights but restricts how public entities may gather health information from certain third parties.