Patient Privacy and Caregiver Awareness Act of 2023

This bill modifies HIPAA privacy rules to strengthen consent requirements for sharing mental health and substance use disorder records. It requires covered entities (like hospitals and insurers) to set a minimum 2-year expiration on patient consent for such disclosures and send written notice 30 days before expiration. The law directly affects patients with mental health or substance use conditions, as well as their caregivers or personal representatives who provide consent. Key provisions mandate clear consent timelines and advance notice, aiming to prevent indefinite sharing of sensitive health information without renewed patient agreement.