Bill > SB0555

This bill requires healthcare providers, groups, practices, clinics, facilities, and other healthcare entities that have contracts with health insurance companies to promptly notify those insurance entities if they experience a cyber-attack. Specifically, any healthcare organization that is reimbursed by health insurance for providing medical services or goods must inform all of their contracted insurance partners as soon as possible after discovering they have been the target of a cyber-attack. The purpose of this notification requirement appears to be enhancing transparency and allowing insurance companies to take necessary protective or responsive actions in the event of a digital security breach. The bill amends multiple sections of Tennessee's legal code related to health insurance, and will take effect immediately upon becoming law, as determined by the Tennessee General Assembly.