SLS 12RS-600 ENGROSSED Page 1 of 10 Coding: Words which are struck through are deletions from existing law; words in boldface type and underscored are additions. Regular Session, 2012 SENATE BILL NO. 281 BY SENATOR JOHNS INSURANCE DEPARTMENT. Provides for confidentiality of records and reporting of complaints against persons and entities subject to jurisdiction of the Department of Insurance. (gov sig) AN ACT1 To amend and reenact R.S. 22:42.1 and 43(A) and (B), relative to confidentiality of records2 in the custody of the Department of Insurance; to provide with respect to disclosure3 of categorical descriptors relative to complaints filed against all persons and entities4 subject to the jurisdiction of the department; and to provide for related matters.5 Be it enacted by the Legislature of Louisiana:6 Section 1. R.S. 22:42.1 and 43(A) and (B) are hereby amended and reenacted to read7 as follows:8 §42.1. Confidentiality of health information; exceptions9 A. Notwithstanding the provisions of Subsections B and C of this Section,10 the commissioner shall comply with the provisions of R.S. 22:43; however, no11 identifier listed in Subsection E of this Section of any of the following persons12 shall be part of the separate file, record, or report required pursuant to R.S.13 22:43 when recording information about any complaint or the compilation of14 statistical data:15 (1) The individual who is the subject of any health information, health16 information record, or the working papers, recorded information, documents,17 SB NO. 281 SLS 12RS-600 ENGROSSED Page 2 of 10 Coding: Words which are struck through are deletions from existing law; words in boldface type and underscored are additions. or copies thereof or related thereto.1 (2) Anyone identified as or where it is reasonable to believe that the2 person is a relative, employer, or household member of the individual who is3 described in Paragraph (1) of this Subsection, where the relative, employer, or4 household member is listed in any record described in Paragraph (1) of this5 Subsection.6 B.(1) All protected health information in the custody of the Department of7 Insurance shall be confidential and privileged, shall not be subject to disclosure8 under Title 44 of the Louisiana Revised Statutes of 1950, and shall not be subject to9 subpoena. Confidentiality and privilege shall be strictly maintained by the10 commissioner of insurance and all employees of the department, except as provided11 in Subsection B of this Section, and the protected health information shall be used12 exclusively for the purpose of discharging the duties and responsibilities of the13 department under this Title. No part of any health information, health14 information record, or the working papers, recorded information, documents,15 or copies thereof or related thereto, produced by, obtained by, or disclosed to16 the commissioner, or any other person, and in the custody of the commissioner17 shall be disclosed under Title 44 of the Louisiana Revised Statutes of 1950.18 (2) "Protected Hhealth information" as used in this Section means either of19 the following: any information in any form or medium, transmitted or20 maintained in any manner, and in the custody of the department that21 (a) Any health or medical information, documents, or records designated as22 confidential by state or federal law.23 (b) Any information, whether oral, written, electronic, visual, or in any other24 form, including demographic information collected from an individual, that is in the25 department's possession which does both of the following:26 (i) Rrelates to the past, present, or future physical or mental health or27 condition of an individual, the provision of health care, including medications and28 prescriptions, to an individual, or the past, present, or future payment for the29 SB NO. 281 SLS 12RS-600 ENGROSSED Page 3 of 10 Coding: Words which are struck through are deletions from existing law; words in boldface type and underscored are additions. provision of health care, including medications and prescriptions, to an individual.1 (ii) Reveals the identity of the individual whose health care is the subject of2 the information, or there is a reasonable basis to believe the information could be3 utilized, either alone or with other information that is or should reasonably be known4 to be available to predictable recipients of the information to reveal the identity of5 that individual.6 C. No records, or the working papers, recorded information, documents,7 or copies thereof or related thereto, produced by, obtained by, or disclosed to8 the commissioner, or any other person, in the course of or after the resolution9 of a complaint against any person or entity subject to the jurisdiction of the10 Department of Insurance and which are in the custody of the commissioner,11 shall be disclosed under Title 44 of the Louisiana Revised Statutes of 1950.12 BD. (1) Nothing in this Section shall prohibit the communication of facts or13 documents that are part of an individual's protected health information to the14 individual or his representative. When authorized in writing by the individual, such15 facts and documents may also be released to the party designated in the written16 authorization. health information or health information records, or copies17 thereof, in the custody of the commissioner to:18 (a) The individual who is the subject of the health information or health19 information record.20 (b) The authorized representative of the individual who is the subject of21 the health information or health information record.22 (c) A third party where written authorization is provided by the23 individual who is the subject of the health information record or by the24 authorized representative of the individual who is the subject of the health25 information or health information record.26 (2) Nothing in this Section shall prohibit the disclosure of copies of the27 complaint filed by the complainant or insured, the response by the person or28 entity subject to the jurisdiction of the department, or the final disposition to:29 SB NO. 281 SLS 12RS-600 ENGROSSED Page 4 of 10 Coding: Words which are struck through are deletions from existing law; words in boldface type and underscored are additions. (a) The complainant or insured.1 (b) The authorized representative of the complainant or insured.2 (c) A third party where written authorization is provided by the3 complainant or insured or by the authorized representative of the complainant4 or insured.5 (23) Nothing in this Section shall prohibit the communication of facts,6 documents, or other information that is part of an individual's protected health7 information if requested by: a record described in this Section, or the working8 papers, recorded information, documents, or copies thereof or related thereto,9 produced by, obtained by, or disclosed to the commissioner, or any other person10 and in the custody of the commissioner to a federal or state or federal prosecuting11 attorney;, the office of the state police, public safety services, Department of Public12 Safety and Corrections, in the conduct of an insurance fraud investigation, a law13 enforcement agency, the office of the state inspector general;, the state legislative14 auditor;, or the attorney general of this state in connection with their statutory15 authority, or to any agency or communication district for the purpose of16 achieving coordinated and effective protection of the public health, safety, or17 welfare. The department shall also share information with any state or federal18 agency for the purpose of investigating or determining insurance or tax fraud or the19 offset of any governmental benefit or with any other government entity authorized20 by law to conduct any audit, investigation, or similar activity in connection with the21 administration of any state or federally funded program.22 (34) Nothing in this Section shall prohibit the commissioner from using23 any records or other information in the custody of the department in the24 furtherance of any regulatory or legal action brought as part of the25 commissioner's official duties communication of facts, documents, or other26 information which are part of an individual's protected health information pursuant27 to an order of a court of competent jurisdiction issued after a contradictory hearing28 based upon a finding that the records should be released in the interest of justice.29 SB NO. 281 SLS 12RS-600 ENGROSSED Page 5 of 10 Coding: Words which are struck through are deletions from existing law; words in boldface type and underscored are additions. (4) Nothing in this Section shall prevent the use of protected health1 information for the compilation of statistical data in which the identity of the2 individual is not disclosed.3 E. The identifiers described in this Section as confidential shall be the4 following:5 (1) Names.6 (2) All geographic subdivisions smaller than a state, including street7 address, city, county or parish, precinct, zip code, and any equivalent geocodes,8 except for the initial three digits of a zip code if, according to the current9 publicly available data from the Bureau of the Census:10 (a) The geographic unit formed by combining all zip codes with the same11 three initial digits contains more than 20,000 people; and12 (b) The initial three digits of a zip code for all such geographic units13 containing 20,000 or fewer people is changed to 000.14 (3) All elements of dates, except year, for dates directly related to an15 individual, including birth date, admission date, discharge date, date of death;16 and all ages over eighty-nine and all elements of dates, including year, indicative17 of such age, except that such ages and elements may be aggregated into a single18 category of age ninety or older.19 (4) Telephone numbers.20 (5) Facsimile numbers.21 (6) Electronic mail addresses.22 (7) Social security numbers.23 (8) Medical record numbers.24 (9) Health plan beneficiary numbers.25 (10) Account numbers.26 (11) Certificate and license numbers.27 (12) Vehicle identifiers and serial numbers, including license plate28 numbers.29 SB NO. 281 SLS 12RS-600 ENGROSSED Page 6 of 10 Coding: Words which are struck through are deletions from existing law; words in boldface type and underscored are additions. (13) Device identifiers and serial numbers.1 (14) Web Universal Resource Locators (URLs).2 (15) Internet Protocol (IP) address numbers.3 (16) Biometric identifiers, including finger and voice prints.4 (17) Full face photographic images and any comparable images.5 (18) Any other unique identifying number, characteristic, or code.6 F. The retention period for records described in this Section shall be no7 less than three calendar years, and the records may be disposed of thereafter8 according to R.S. 44:401 et seq.9 §43. Complaints against insurers persons and entities subject to the jurisdiction10 of the Department of Insurance; file by company person or entity11 subject to jurisdiction; public information12 A. The department shall file all complaints which it receives against any13 named insurer a person or entity subject to the jurisdiction of the department in14 a separate file for each such person or entity subject to the jurisdiction of the15 department insurer. This record shall be maintained in such a manner as to permit16 the public to readily ascertain information concerning complaints against any person17 or entity subject to the jurisdiction of the department insurance companies,18 without the necessity of reviewing each individual complaint. The retention period19 for each record described in this Section shall be no less than three calendar20 years, and any record may be disposed of thereafter according to R.S. 44:40121 et seq. The commissioner shall avail himself of such computer equipment as he has22 available to perform this task.23 B.(1) The record required by this Section shall contain the following24 information including but not limited to the following:25 (a) Date of complaint.26 (b) Name of the respondent person or entity company against whom the27 complaint is lodged.28 (c) Category Name of the complainant or insured.29 SB NO. 281 SLS 12RS-600 ENGROSSED Page 7 of 10 Coding: Words which are struck through are deletions from existing law; words in boldface type and underscored are additions. (d) Category of the respondent person or entity against whom the1 complaint is lodged.2 (de) Nature of Reason for the complaint.3 (ef) Action and findings by the department Disposition.4 (fg) Date of any such action disposition.5 (gh) The response of the insurance company respondent, person or entity6 against whom the complaint is lodged in addition to the type of coverage.7 (i) Type of coverage.8 (2) It shall be sufficient for compliance with this Section that the9 commissioner uses the same coded categorical descriptors established by the10 National Association of Insurance Commissioners (NAIC) Complaint Database11 System (CDS) for the commissioner's database fields for the categorical12 descriptors:13 (a) Category of the complainant or insured.14 (b) Category of the respondent person or entity.15 (c) Type of coverage.16 (d) Reason for complaint.17 (e) Disposition.18 (3) Where a categorical descriptor for the category of the complainant19 or insured, category of the respondent person or entity, type of coverage, reason20 for complaint, or disposition is unique to the state of Louisiana, that unique21 categorical descriptor shall be reported, and the commissioner shall be in22 compliance with this Section when using that unique categorical descriptor.23 (4) Where the response of the person or entity against whom the24 complaint is lodged is reported, it shall be sufficient for the commissioner to25 disclose the following applicable categorical descriptors:26 (a) Respondent agreed with complainant.27 (b) Respondent disagreed with complainant.28 (c) Respondent asserted that insufficient information was provided in29 SB NO. 281 SLS 12RS-600 ENGROSSED Page 8 of 10 Coding: Words which are struck through are deletions from existing law; words in boldface type and underscored are additions. the complaint.1 (d) No response was provided by respondent.2 (e) Respondent did not contest the complaint.3 (f) Respondent completed corrective action.4 (g) Respondent provided information.5 (h) Respondent provided an incomplete response.6 (i) Respondent appealed the disposition.7 (5) If respondent completes corrective action, the commissioner shall8 disclose the applicable categorical descriptor for the specific corrective action9 completed by reporting that categorical descriptor in the categorical descriptor10 database field for corrective actions.11 (6) If an appeal is taken, the final disposition on appeal shall be provided12 subject to any decision of the appellate tribunal.13 (27) The computer program employed by the commissioner shall, at a14 minimum, be able to sort the information in this database on any of the fields15 described in this Subparagraph (1) Subsection B of this Sub Section and print out16 a written report thereof no later than sixty days from the effective date of the Act17 which originated as SLS 12RS-600.18 (8) Where there was a final disposition of a complaint prior to the19 effective date of the Act which originated as SLS 12RS-600 and the record of20 that complaint is in the custody of the department, it shall be sufficient for the21 commissioner to report the information required under this Section utilizing the22 database described in this Section. It shall not be necessary for those records23 of complaints to be reviewed for the purpose of applying new categorical24 descriptors or for new categorical descriptors to be applied to those complaints.25 * * *26 Section 2. This Act shall become effective upon signature by the governor or, if not27 signed by the governor, upon expiration of the time for bills to become law without signature28 by the governor, as provided by Article III, Section 18 of the Constitution of Louisiana. If29 SB NO. 281 SLS 12RS-600 ENGROSSED Page 9 of 10 Coding: Words which are struck through are deletions from existing law; words in boldface type and underscored are additions. vetoed by the governor and subsequently approved by the legislature, this Act shall become1 effective on the day following such approval.2 The original instrument and the following digest, which constitutes no part of the legislative instrument, were prepared by Cheryl Horne. DIGEST Johns (SB 281) Proposed law prohibits identification of individuals who are the subject of health information records in the custody of the Department of Insurance (DOI) utilizing the same list of identifiers listed in the privacy rules for identification under the Health Insurance Portability and Accountability Act of 1996 and any amendments thereto and the privacy rules for identification under the Health Information Technology for Economic and Clinical Health Act of 2009 and any amendments thereto in response to a public records request. Proposed law provides that it is sufficient for the commissioner to report complaints against persons and entities under the jurisdiction of DOI by utilizing the same National Association of Insurance Commissioners (NAIC) Complaint Database System (CDS) categorical descriptors and any categorical DOI descriptors unique to the state of Louisiana used by DOI in its routine reporting to the NAIC CDC. Any other unique categorical descriptors used by the DOI (i.e., response of the respondent) will also be provided with information about complaints against persons and entities under the jurisdiction of DOI. Proposed law requires complaint reporting of all persons and entities subject to jurisdiction of DOI rather than only of insurers and companies. Proposed law provides requirements for compliance with proposed law for complaint reporting and the utilization of categorical descriptors established by the NAIC CDS. Proposed law specifically adds type of coverage as a categorical descriptor for complaint reporting under proposed law. Proposed law provides that it is sufficient for the commissioner to report complaints against persons and entities under the jurisdiction of the department by utilizing the NAIC CDS categorical descriptors which DOI Information Technology Office is now equipped to utilize and has mapped to and is pre-staged for implementation with NAIC CDS on a projected completion date of no later than January 2013. Proposed law includes examples of categorical descriptors for "completion of corrective action" such as: policy reinstated, credit report reordered, corrective action plan submitted to and approved by insurance department, surcharge removed, audit redone, company paid claim, company reinstated policy, company or producer refunded premium the company allowed service as in-network or the company updated system to reflect updated CPT codes. Proposed law provides that the retention period for records of complaints and the records utilizing the database is no less than three calendar years. Proposed law provides that the computer program employed by the commissioner shall, at a minimum, be able to sort the information in this database on any of the fields described in proposed law and print out a written report no later than 60 days from the effective date of proposed law. Proposed law provides that where there was a final disposition of a complaint prior to the effective date of proposed law and the record of that complaint is in the custody of the department, it shall be sufficient for the commissioner to report the information required SB NO. 281 SLS 12RS-600 ENGROSSED Page 10 of 10 Coding: Words which are struck through are deletions from existing law; words in boldface type and underscored are additions. under proposed law utilizing the database described in proposed law. Further provides that it shall not be necessary for those records of complaints to be reviewed for the purpose of applying new categorical descriptors or for new categorical descriptors to be applied to those complaints. Effective upon signature of the governor or lapse of time for gubernatorial action. (Amends R.S. 22:42.1 and 43(A) and (B) Summary of Amendments Adopted by Senate Committee Amendments Proposed by Senate Committee on Insurance to the original bill. 1. Makes technical changes.