Bill > HB2606

This bill creates new privacy protections for patient health records in Missouri by establishing that patients retain ownership of their health records and that healthcare providers must obtain informed consent before disclosing or using these records. Specifically, the bill defines key terms like "health records", "informed consent", and "medical emergency", and requires that health care providers only release patient information with explicit written permission from the patient, except in documented medical emergencies or when specifically authorized by state law. The bill prohibits conditioning medical treatment on a patient's consent to share records and mandates that even de-identified or limited data sets cannot be used for research without specific patient authorization. Patients who experience unauthorized disclosure of their health records can bring civil actions to recover actual damages, with potential liquidated damages ranging from $1,000 to $10,000 per occurrence, and can also seek injunctive relief and attorney's fees. This legislation aims to give patients more control over their personal health information and provide meaningful legal recourse if their privacy is violated.

Health and Social Services

https://house.mo.gov/Bill.aspx?bill=HB2606&year=2026&code=R