HEALTH: Provides relative to protecting healthcare data

The definition of 'protected health information' was simplified by removing the clause allowing disclosures required by law or in accordance with Subsection G.

The privacy notice requirement was changed from a general description of permitted uses to a mandatory inclusion of specific purposes, specific types of information, and specific third parties.

A new requirement was added mandating that centers provide a simple mechanism for clients to revoke previously granted consent.

A new requirement was added for centers to provide clients with a free copy of their records within ten business days of a request.

The previous exception allowing general contractors to disclose information required by law or Subsection G was removed.

Enforcement actions were expanded to explicitly include monetary fines and warnings, with penalties commensurate with the entity's degree of responsibility.

A new provision was added clarifying that general contractors may still disclose aggregate data (like client counts) for oversight purposes or to maintain confidentiality.

The bill's requirements now explicitly apply to any organization receiving state or federal funding for pregnancy center services, referrals, marketing, or administrative functions.