Bill > HB1317

This bill establishes robust privacy protections for medical, disability, and mental health data in New Hampshire, reflecting the state's commitment to personal liberty and limited government intrusion. The legislation prohibits state agencies, contractors, vendors, and grant recipients from collecting, maintaining, or disclosing personally identifiable health data to the federal government or third parties, except under specific conditions: when the individual (or their legal representative) provides informed written consent, when disclosure is legally required, or when necessary for providing healthcare services. The bill mandates that any required disclosures must be limited to the minimum necessary data, preferably using de-identified or anonymized information, and ensures that all parties handling such data adhere to the same privacy standards. It explicitly reinforces existing protections under federal laws like HIPAA (Health Insurance Portability and Accountability Act), ADA (Americans with Disabilities Act), and other privacy-related statutes, and grants the state Attorney General enforcement authority with the ability to impose civil penalties for violations. The law aims to protect individuals, particularly those with medical conditions, disabilities, or mental health needs, from potential stigma or discrimination by carefully controlling the sharing of their sensitive personal information, and will take effect 60 days after its passage.