Bill > S195

This bill aims to clarify and enhance privacy protections for electronic health records (EHRs). It proposes the following key provisions: 1. Allows patients to choose which healthcare providers can share their identifiable health information on statewide EHR networks or health information exchanges. 2. Requires any plan for a statewide EHR network or health information exchange approved by the Health Information Technology Council to meet certain requirements, such as ensuring the privacy and security of health information. 3. Mandates annual privacy and security audits of EHR networks, health information exchanges, and participating entities that maintain EHRs, with the results reported to the Attorney General. 4. Empowers individuals to bring civil actions against EHR networks, health information exchanges, and participating entities for violations of privacy and security requirements, and allows the Attorney General to enforce these obligations. It also establishes damages and penalties for violations. 5. Prohibits retaliation against employees who report or refuse to participate in activities that violate the law or its implementing regulations. Overall, the bill strengthens patient privacy and data security protections for electronic health records in Massachusetts.

Business and Industry

https://malegislature.gov/Bills/190/S195