Bill > S810

This bill aims to clarify and enhance privacy protections for electronic health records (EHRs). The key provisions are: 1. It gives patients the option to allow only designated healthcare providers to share their identifiable health information with any statewide interoperable EHR network or health information exchange. 2. It requires any statewide interoperable EHR network or health information exchange approved by the Health Information Technology (HIT) Council, and any organization that receives funding for health IT adoption, to conduct annual privacy and security audits and report any violations to the Attorney General. 3. It authorizes the HIT Council to promulgate rules and regulations to define key terms like "identifiable health information" and "unauthorized access/disclosure." It also allows individuals and the Attorney General to bring civil actions against entities that violate the privacy and data security requirements. 4. It provides for damages, including liquidated and punitive damages, and attorney's fees if a violation is found, and protects employees from retaliation for reporting violations.

Health and Social Services

https://malegislature.gov/Bills/192/S810