Bill > H1231

This bill requires state agencies to establish schedules for disposing of records containing personal identification information, which is defined as any data that can identify a unique individual, such as names, addresses, social security numbers, and medical records. Agencies that collect and maintain this information must also post a privacy policy on their websites detailing what data they collect, how it's used, and how it's protected, and they must obtain consent before installing "cookies" (small data files websites place on users' computers) unless the cookie is temporary and deleted when the browser closes. Contracts with outside vendors for public agency services must also include these privacy policy requirements, though violations of these provisions will not create a right for individuals to sue. Additionally, the bill mandates that the Agency for Health Care Administration (AHCA) provide comprehensive, searchable information on assisted living facilities on its website, including details on licenses, services, and violations, and it dissolves the Center for Health Information and Policy Analysis, transferring its responsibilities to AHCA to coordinate a statewide health information system, with oversight from the Office of Program Policy Analysis and Government Accountability (OPPAGA) which will report findings to the Legislature.