Massachusetts 2023-2024 Regular Session

Massachusetts House Bill H377 Latest Draft

Bill / Introduced Version Filed 02/16/2023

                            1 of 1
HOUSE DOCKET, NO. 1850       FILED ON: 1/18/2023
HOUSE . . . . . . . . . . . . . . . No. 377
The Commonwealth of Massachusetts
_________________
PRESENTED BY:
Tram T. Nguyen
_________________
To the Honorable Senate and House of Representatives of the Commonwealth of Massachusetts in General
Court assembled:
The undersigned legislators and/or citizens respectfully petition for the adoption of the accompanying bill:
An Act to protect patient privacy and prevent unfair and deceptive advertising of pregnancy-
related services.
_______________
PETITION OF:
NAME:DISTRICT/ADDRESS :DATE ADDED:Tram T. Nguyen18th Essex1/18/2023Lindsay N. Sabadosa1st Hampshire1/19/2023 1 of 12
HOUSE DOCKET, NO. 1850       FILED ON: 1/18/2023
HOUSE . . . . . . . . . . . . . . . No. 377
By Representative Nguyen of Andover, a petition (accompanied by bill, House, No. 377) of 
Tram T. Nguyen and Lindsay N. Sabadosa for legislation to protect patient privacy and prevent 
unfair and deceptive advertising of pregnancy-related services. Consumer Protection and 
Professional Licensure.
The Commonwealth of Massachusetts
_______________
In the One Hundred and Ninety-Third General Court
(2023-2024)
_______________
An Act to protect patient privacy and prevent unfair and deceptive advertising of pregnancy-
related services.
Be it enacted by the Senate and House of Representatives in General Court assembled, and by the authority 
of the same, as follows:
1 SECTION 1. The General Laws are hereby amended by inserting after chapter 93A the 
2following chapter:-
3 CHAPTER 93A½ . 
4 Section 1. Definitions 
5 As used in this chapter, the following words shall have the following meanings, unless 
6the context clearly requires otherwise:
7 “Abortion” shall have the same meaning as defined in section 12K of chapter 112. 
8 “Client”, an individual who is inquiring about or seeking services at a pregnancy services 
9center. 2 of 12
10 “Clinical laboratory services”, the microbiological, serological, chemical, hematological, 
11biophysical, cytological or pathological examination of materials derived from the human body 
12for the purpose of obtaining information for the diagnosis, prevention or treatment of disease or 
13the assessment of a health condition.
14 “Collect”, buying, renting, gathering, obtaining, receiving or otherwise accessing any 
15personal information pertaining to an individual by any means, including, but not limited to, 
16obtaining information from an individual, either actively or passively, or by observing an 
17individual’s behavior.
18 “Consent”, a clear affirmative act signifying an individual’s freely given, specific, 
19informed, and unambiguous agreement to allow the processing of personal information relating 
20to the individual for a narrowly defined particular purpose; provided, however, that “consent” 
21may include a written statement, including a statement written by electronic means, or any other 
22unambiguous affirmative action; provided, however, that the following shall not constitute 
23“consent”: 
24 (i) acceptance of a general or broad terms of use or similar document that contains 
25descriptions of personal information processing along with other, unrelated information; or
26 (ii) agreement obtained through: (1) a false, fictitious, fraudulent or materially misleading 
27statement or representation; or (2) a user interface designed or manipulated with the substantial 
28effect of subverting or impairing user autonomy, decision-making or choice.
29 “Emergency contraception”, one or more prescription drugs: 
30 (i) used separately or in combination for the purpose of preventing pregnancy;  3 of 12
31 (ii) administered to or self-administered by a patient within a medically recommended 
32amount of time after sexual intercourse; 
33 (iii) dispensed for such purpose in accordance with professional standards of practice; 
34and
35 (iv) determined by 	the United States Food and Drug Administration to be safe for such 
36purpose.
37 “Health information”, any oral or written information in any form or medium that relates 
38to health insurance or the past, present or future physical or mental health or condition of a 
39client.
40 “Identified or identifiable individual”, an individual who can be readily identified, 
41directly or indirectly.
42 “Individual”, a natural person residing in the commonwealth or whose personal 
43information is collected in the commonwealth; provided, however, that “individual” shall not 
44include a natural person acting in an employment or commercial context.
45 "Licensed health care provider”, a person licensed under the provisions of federal or state 
46law to provide health care or other medical services.
47 “Limited services pregnancy center”, a pregnancy services center that does not directly 
48provide, or provide referrals for, abortions or emergency contraception.
49 “Personal information”, information that identifies, relates to, describes, is reasonably 
50capable of being associated with or could reasonably be linked, directly or indirectly, with an 
51identified or identifiable individual. 4 of 12
52 “Pregnancy-related service”, any medical or health counseling service related to 
53pregnancy or pregnancy prevention, including, but not limited to, contraception and 
54contraceptive counseling, pregnancy testing, pregnancy diagnosis, pregnancy options counseling, 
55obstetric ultrasound, obstetric sonogram and prenatal care.
56 “Pregnancy services center”, a facility, including a mobile facility, whose primary 
57purpose is to provide services to clients who are or have reason to believe they may be pregnant 
58and that:
59 (i) offers obstetric ultrasounds, obstetric sonograms, pregnancy testing or diagnosis or 
60prenatal care to pregnant clients; or 
61 (ii) has the appearance of a medical facility by virtue of having two or more of the 
62following factors present: 
63 (1) staff or volunteers who wear medical attire and uniforms; 
64 (2) one or more examination tables; 
65 (3) a private or semiprivate room or area containing medical supplies or medical 
66instruments; 
67 (4) staff or volunteers who collect health information from clients; or 
68 (5) the facility is located on the same premises as a licensed health care facility or 
69licensed health care provider or shares facility space with a licensed health care provider.
70 “Premises”, land and improvements or appurtenances or any part thereof. 5 of 12
71 “Prenatal care”, services consisting of a physical examination, pelvic examination or 
72clinical laboratory services provided to a client during pregnancy.
73 “Process”, any operation or set of operations which are performed on personal 
74information or on sets of personal information, whether or not by automated means, such as the 
75collection, use, storage, disclosure, sharing, analysis, prediction, deletion or modification of 
76personal information.
77 Section 2. Deceptive Advertising of Pregnancy-Related Services
78 No limited services pregnancy center, with the intent to perform a pregnancy-related 
79service, shall make or disseminate before the public, or cause to be made or disseminated before 
80the public, in any newspaper or other publication, through any advertising device, or in any other 
81manner, including, but not limited to, through use of the internet, any statement concerning any 
82pregnancy-related service or the provision of any pregnancy-related service that: 
83 (i) is deceptive, whether by statement or omission; and 
84 (ii) a limited services pregnancy center knows or reasonably should know to be 
85deceptive.
86 Section 3. Privacy Standards for Pregnancy-Related Services
87 (a) A pregnancy services center shall process an individual’s personal information:
88 (i) lawfully, fairly and in a transparent manner in relation to the individual; 
89 (ii) for specified, explicit and legitimate purposes and not further process the personal 
90information in a manner that is incompatible with those purposes; 6 of 12
91 (iii) in a manner that is adequate, relevant and limited to what is reasonably necessary in 
92relation to the purposes for which it is processed;
93 (iv) in a form which permits identification of individuals for no longer than is necessary 
94for the purposes for which the information is processed; and
95 (v) in a manner that ensures that the information remains appropriately secure.
96 (b) A pregnancy services center shall not process an individual’s personal information 
97unless the center has obtained the individual’s consent. 
98 (c) Prior to processing an individual’s personal information, a pregnancy services center 
99shall provide the individual with a reasonably accessible, clear and meaningful privacy notice 
100that shall include:
101 (i) the pregnancy services center’s specific purposes for processing such information;
102 (ii) the categories of personal information processed by the pregnancy services center; 
103and
104 (iii) the categories of third parties and other entities to whom the pregnancy services 
105center discloses personal information. 
106 (d) A pregnancy services center shall not process personal information for purposes 
107incompatible with the disclosed purposes for which the information was collected without 
108providing the individual with notice consistent with this section.
109 (e) A pregnancy services center shall provide an effective, clear and conspicuous 
110mechanism for an individual to revoke consent that the individual previously provided pursuant  7 of 12
111to this section. Upon revocation of such consent, the pregnancy services center shall cease to 
112process the individual’s personal information as soon as practicable, but not later than fifteen 
113days after the receipt of such request.
114 (f) A pregnancy services center shall exercise reasonable due diligence in: 
115 (i) selecting an entity to process an individual’s personal information on behalf of the 
116pregnancy services center; and 
117 (ii) deciding whether to disclose personal information to a third party. 
118 Section 4. Limitations 
119 (a) Section 3 shall not apply to: 
120 (i) a covered entity or business associate, as such terms are defined in 45 CFR 160.103; 
121 (ii) health information processed pursuant to 45 C.F.R. 160, 162 and 164; 
122 (iii) patient identifying information for purposes of 42 C.F.R. 2, established pursuant to 
12342 U.S.C. 290dd-2; 
124 (iv) information and documents created for purposes of the federal Health Care Quality 
125Improvement Act of 1986, 42 U.S.C. 11101 et seq.; 
126 (v) patient safety work product for purposes of the federal Patient Safety and Quality 
127Improvement Act, 42 U.S.C. 299b-21 et seq.;  8 of 12
128 (vi) information that is: (1) derived from any of the health care-related information listed 
129in this subsection; and (2) de-identified in accordance with the requirements for de-identification 
130pursuant to 45 C.F.R. 164;
131 (vii) information that is treated in the same manner as, or that originates from and is 
132intermingled to be indistinguishable with, information exempt under this subsection that is 
133maintained by: (1) a covered entity or business associate, as defined in 45 CFR 160.103; or (2) a 
134program of a qualified service organization as defined by 42 U.S.C. 290dd-2;
135 (viii) publicly available information about an individual that:
136 (1) is lawfully made available from federal, state or local government records; or 
137 (2) a pregnancy services center has a reasonable basis to believe is lawfully and 
138intentionally made available to the general public: (A) through widely distributed media; or (B) 
139by the individual, unless the individual has restricted 	the information to a specific audience;
140 (ix) de-identified information that cannot reasonably be used to infer information about, 
141or otherwise be linked to, an identified or identifiable individual, or a device linked to such 
142individual; provided, however, that the pregnancy services center that possesses the information: 
143 (1) takes reasonable technical and organizational measures to ensure that the information 
144cannot, at any point, be associated with or used to re-identify an identified or identifiable 
145individual; 
146 (2) publicly commits to process the information solely in a de-identified fashion;  9 of 12
147 (3) does not attempt to re-identify the information; provided, however, that the pregnancy 
148services center may attempt to re-identify the information solely for the purpose of determining 
149whether its de-identification procedures satisfy the provisions of this definition; and
150 (4) contractually obligates any recipients of the information to comply with the 
151provisions of this clause with respect to the information and requires that such obligations be 
152included contractually in all subsequent instances for which the information may be received.
153 (b) Section 3 shall not apply where compliance by the pregnancy services center would 
154violate an evidentiary privilege under the laws of the Commonwealth or be construed to prevent 
155the pregnancy services center from providing personal information concerning an individual to a 
156person covered by an evidentiary privilege under the laws of the Commonwealth as part of a 
157privileged communication.
158 (c) Nothing in section 3 shall be construed to restrict a pregnancy services center’s ability 
159to:
160 (i) comply with federal, state or local laws, rules or regulations;
161 (ii) comply with a civil, criminal or regulatory inquiry, subpoena or summons by federal, 
162state, local or other governmental authorities;
163 (iii) cooperate with law enforcement agencies concerning conduct or activity that the 
164pregnancy services center reasonably and in good faith believes may violate federal, state or 
165local laws, rules or regulations;
166 (iv) investigate, establish, exercise, prepare for or defend legal claims; or 10 of 12
167 (v) take immediate steps to protect the security or protection of a natural person, if that 
168natural person is at risk or danger of death or serious physical injury.
169 Section 5. Enforcement by the Attorney General 
170 (a) Whenever the attorney general has reasonable cause to believe that a pregnancy 
171services center has engaged in, is engaging in or is about to engage in a violation of this chapter, 
172the attorney general may issue a civil investigative demand. The provisions of section 6 of 
173chapter 93A of the General Laws shall apply mutatis mutandis to civil investigative demands 
174under this chapter.
175 (b) The attorney general may apply to any court of competent jurisdiction for injunctive 
176relief to compel compliance with the provisions of this chapter and, with respect to violations of 
177section 2, to correct the effects of the deceptive advertising; provided, however, that the attorney 
178general shall give written notice to the pregnancy services center in accordance with subsection 
179(c) of this section. 
180 (c) Prior to commencing an action pursuant to this section, the attorney general shall give 
181written notice to the pregnancy services center of the violation of this chapter and allow the 
182pregnancy services center to cure such violation not later than 10 days after receipt of the written 
183notice. The attorney general may file an action pursuant to this section after such period if the 
184pregnancy services center does not respond to the written notice or refuses to cure such violation. 
185 (d) Upon a finding by the court that a pregnancy services center has violated any 
186provision of this chapter, the state shall be entitled to recover:
187 (i) civil penalties of up to one thousand dollars per violation; and  11 of 12
188 (ii) reasonable attorney's fees and costs.
189 (e) In determining the overall amount of civil penalties to seek or assess against a 
190pregnancy services center, the attorney general or the court shall include, but not be limited to, 
191the following in its consideration:
192 (i) the nature and severity of the violation; 
193 (ii) the size, scope, and type of the pregnancy services center; and 
194 (iii) the good faith cooperation of the pregnancy services center with any investigations 
195conducted by the attorney general pursuant to this section.
196 (f) Any injunctive relief ordered by the court in response to a violation of section 2 may 
197include requiring the limited service pregnancy center to: 
198 (i) pay for and disseminate appropriate corrective advertising in the same form and using 
199the same advertising device as used in the deceptive advertising; 
200 (ii) post a remedial notice that corrects the effects of the deceptive advertising; or 
201 (iii) provide such other narrowly tailored relief as the court deems necessary to remedy 
202the adverse effects of the deceptive advertising on any clients seeking pregnancy-related 
203services.
204 (g) Nothing in this section shall prohibit the state or any political subdivision thereof 
205from seeking any administrative, legal or equitable relief permitted by law, including, but not 
206limited to, relief permitted by chapter 93A of the General Laws. 12 of 12
207 SECTION 2. Chapter 93A½ of the General Laws shall take effect 6 months after the 
208passage of this act.