Bill > HB0199

This bill amends provisions related to the Department of Health and Human Services' health data authority, primarily by updating definitions and clarifying duties concerning the collection, management, and use of health data. Key changes include defining "direct identifiers" to specify what information is considered personally identifiable, and expanding the definition of "disclosure" to include the division's staff and contractors. The bill also refines the department's duties to develop and maintain written plans for data collection, management, and use, emphasizing strategic, data management, and analytics/dissemination plans, and mandates the publication of these plans online. It strengthens privacy protections by requiring encryption of identifiable health data when stored and transmitted, and allows for an opt-out system for individuals to restrict access to their identifiable health data. Furthermore, the bill clarifies exceptions for disclosing identifiable health data, including for specific public health systems, within the department to certain local entities without direct identifiers, and for approved research or statistical purposes under strict agreements. It also establishes an "All Payer Claims Database" for maintaining health care cost and claim information and extends the repeal date for the Utah Health Data Authority.

Business and Industry, Health and Social Services

https://le.utah.gov/~2026/bills/static/HB0199.html