New Mexico 2025 Regular Session

New Mexico House Bill HB389 Compare Versions

Only one version of the bill is available at this time.

Old	New	Differences
1	1	underscored material = new
2	2	[bracketed material] = delete
3	3	1
4	4	2
5	5	3
6	6	4
7	7	5
8	8	6
9	9	7
10	10	8
11	11	9
12	12	10
13	13	11
14	14	12
15	15	13
16	16	14
17	17	15
18	18	16
19	19	17
20	20	18
21	21	19
22	22	20
23	23	21
24	24	22
25	25	23
26	26	24
27	27	25
28	28	HOUSE BILL 389
29	29	57
30	30	TH LEGISLATURE
31	31	-
32	32
33	33	STATE
34	34
35	35	OF
36	36
37	37	NEW
38	38
39	39	MEXICO
40	40
41	41	-
42	42	FIRST SESSION
43	43	,
44	44
45	45	2025
46	46	INTRODUCED BY
47	47	Elizabeth "Liz" Thomson and Debra M. Sariñana
48	48	AN ACT
49	49	RELATING TO HEALTH; AMENDING AND ENACTING SECTIONS OF THE
50	50	ELECTRONIC MEDICAL RECORDS ACT TO REQUIRE THAT THE ENTITY
51	51	DESIGNATED AS THE STATE'S HEALTH INFORMATION EXCHANGE SHALL
52	52	ALSO FUNCTION AS THE STATE'S HEALTH DATA UTILITY.
53	53	BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF NEW MEXICO:
54	54	SECTION 1. Section 24-14B-1 NMSA 1978 (being Laws 2009,
55	55	Chapter 69, Section 1) is amended to read:
56	56	"24-14B-1. SHORT TITLE.--[This act ] Chapter 24, Article
57	57	14B NMSA 1978 may be cited as the "Electronic Medical Records
58	58	Act"."
59	59	SECTION 2. Section 24-14B-3 NMSA 1978 (being Laws 2009,
60	60	Chapter 69, Section 3) is amended to read:
61	61	"24-14B-3. DEFINITIONS.--As used in the Electronic
62	62	Medical Records Act:
63	63	.229484.2 underscored material = new
64	64	[bracketed material] = delete
65	65	1
66	66	2
67	67	3
68	68	4
69	69	5
70	70	6
71	71	7
72	72	8
73	73	9
74	74	10
75	75	11
76	76	12
77	77	13
78	78	14
79	79	15
80	80	16
81	81	17
82	82	18
83	83	19
84	84	20
85	85	21
86	86	22
87	87	23
88	88	24
89	89	25
90	90	A. "demographic information" means information that
91	91	identifies the individual who is the subject of the health care
92	92	information, including the individual's name, date of birth and
93	93	address and other information necessary to identify the
94	94	individual, that may be used to identify the individual or that
95	95	associates the individual with the individual's electronic
96	96	medical record;
97	97	B. "disclose" means to release, transfer, provide,
98	98	give access to or otherwise divulge in any other manner
99	99	information outside the entity holding the information;
100	100	C. "electronic" means relating to technology having
101	101	electrical, digital, magnetic, wireless, optical,
102	102	electromagnetic or similar capabilities;
103	103	D. "electronic medical record" means an electronic
104	104	record of an individual patient's health care information that
105	105	may contain demographic information;
106	106	E. "electronic signature" means an electronic
107	107	sound, symbol or process attached to or logically associated
108	108	with a record and executed or adopted by an individual with the
109	109	intent to sign the record;
110	110	F. "health care" means care, services or supplies
111	111	related to the health of an individual and includes:
112	112	(1) preventive, diagnostic, therapeutic,
113	113	rehabilitative, maintenance or palliative care and counseling;
114	114	(2) services, assessments or procedures that
115	115	.229484.2
116	116	- 2 - underscored material = new
117	117	[bracketed material] = delete
118	118	1
119	119	2
120	120	3
121	121	4
122	122	5
123	123	6
124	124	7
125	125	8
126	126	9
127	127	10
128	128	11
129	129	12
130	130	13
131	131	14
132	132	15
133	133	16
134	134	17
135	135	18
136	136	19
137	137	20
138	138	21
139	139	22
140	140	23
141	141	24
142	142	25
143	143	are concerned with the physical or mental condition or
144	144	functional status of an individual or that affect the structure
145	145	or function of the body of an individual; and
146	146	(3) the sale or dispensing of a drug, a
147	147	device, a piece of equipment or other item in accordance with a
148	148	prescription;
149	149	G. "health care group purchaser" means a person who
150	150	is licensed, certified or otherwise authorized or permitted by
151	151	the New Mexico Insurance Code to pay for or purchase health
152	152	care on behalf of an identified individual or group of
153	153	individuals, regardless of whether the cost of coverage or
154	154	services is paid for by the purchaser or the persons receiving
155	155	coverage or services;
156	156	H. "health care information" means any information,
157	157	whether oral or recorded in any form or medium, related to the
158	158	past, present or future physical or mental health or condition
159	159	of an individual; the provision of health care to an
160	160	individual; or the past, present or future payment for the
161	161	provision of health care to an individual;
162	162	I. "health care institution" means an institution,
163	163	facility or agency licensed, certified or otherwise authorized
164	164	or permitted by law to provide health care in the ordinary
165	165	course of business;
166	166	J. "health data utility" means an entity that
167	167	combines and shares disparate electronic health care
168	168	.229484.2
169	169	- 3 - underscored material = new
170	170	[bracketed material] = delete
171	171	1
172	172	2
173	173	3
174	174	4
175	175	5
176	176	6
177	177	7
178	178	8
179	179	9
180	180	10
181	181	11
182	182	12
183	183	13
184	184	14
185	185	15
186	186	16
187	187	17
188	188	18
189	189	19
190	190	20
191	191	21
192	192	22
193	193	23
194	194	24
195	195	25
196	196	information sets for purposes that include treatment, care
197	197	coordination, quality improvement, population health, managing
198	198	public health emergencies or other public and community health
199	199	services;
200	200	[J.] K. "health information exchange" means an
201	201	[arrangement among persons participating in a defined secure
202	202	electronic network service, such as a regional health
203	203	information organization, that allows the sharing of health
204	204	care information about individual patients among different
205	205	health care institutions or unaffiliated providers. The use of
206	206	an electronic medical record system by a health care provider,
207	207	by or within a health care institution or by an organized
208	208	health care arrangement as defined by the federal Health
209	209	Insurance Portability and Accountability Act of 1996 does not
210	210	constitute a health information exchange ] entity that provides
211	211	services to enable the electronic and secure sharing of health
212	212	care information;
213	213	[K.] L. "information" means data, including text,
214	214	images, sounds and codes and computer programs, software and
215	215	databases;
216	216	[L.] M. "provider" means an individual who is
217	217	licensed, certified or otherwise authorized or permitted by law
218	218	to provide health care in the ordinary course of business or
219	219	practice of a profession;
220	220	[M.] N. "record" means information that is
221	221	.229484.2
222	222	- 4 - underscored material = new
223	223	[bracketed material] = delete
224	224	1
225	225	2
226	226	3
227	227	4
228	228	5
229	229	6
230	230	7
231	231	8
232	232	9
233	233	10
234	234	11
235	235	12
236	236	13
237	237	14
238	238	15
239	239	16
240	240	17
241	241	18
242	242	19
243	243	20
244	244	21
245	245	22
246	246	23
247	247	24
248	248	25
249	249	inscribed on a tangible medium or that is stored in an
250	250	electronic or other medium and is retrievable in perceivable
251	251	form;
252	252	[N.] O. "record locator service" means an
253	253	information service that contains demographic information and
254	254	the location of health care information of a specified
255	255	individual across different health care institutions or
256	256	unaffiliated providers that participate in the service. The
257	257	use of an electronic medical record system by a health care
258	258	provider or by an organized health care arrangement as defined
259	259	by the federal Health Insurance Portability and Accountability
260	260	Act of 1996 does not constitute a record locator service; and
261	261	[O.] P. "treatment" means the provision,
262	262	coordination or management of health care and related services
263	263	by one or more providers, including the coordination or
264	264	management of health care by a provider with a third party;
265	265	consultation between providers relating to an individual; or
266	266	the referral of an individual for health care from one provider
267	267	to another."
268	268	SECTION 3. Section 24-14B-6 NMSA 1978 (being Laws 2009,
269	269	Chapter 69, Section 6, as amended) is amended to read:
270	270	"24-14B-6. USE AND DISCLOSURE OF ELECTRONIC HEALTH CARE
271	271	INFORMATION.--
272	272	A. A provider, health care institution, health
273	273	information exchange, health data utility or health care group
274	274	.229484.2
275	275	- 5 - underscored material = new
276	276	[bracketed material] = delete
277	277	1
278	278	2
279	279	3
280	280	4
281	281	5
282	282	6
283	283	7
284	284	8
285	285	9
286	286	10
287	287	11
288	288	12
289	289	13
290	290	14
291	291	15
292	292	16
293	293	17
294	294	18
295	295	19
296	296	20
297	297	21
298	298	22
299	299	23
300	300	24
301	301	25
302	302	purchaser shall not use or disclose health care information in
303	303	an individual's electronic medical record to another person
304	304	without the consent of the individual except as allowed by
305	305	state or federal law.
306	306	B. A provider, health care institution or health
307	307	care group purchaser may disclose demographic information and
308	308	information about the location of an individual's electronic
309	309	medical records to a record locator service in accordance with
310	310	state or federal law. A provider or health care institution
311	311	participating in a health information exchange or a health data
312	312	utility using a record locator service shall not have access to
313	313	demographic information, information about the location of the
314	314	individual's electronic medical records or information in an
315	315	individual's electronic medical record except in connection
316	316	with the treatment of the individual or as permitted by the
317	317	consent of the individual or as otherwise permitted by state or
318	318	federal law.
319	319	C. A record locator service shall maintain an audit
320	320	log of persons obtaining access to information in the record
321	321	locator service, which audit log shall contain, at a minimum,
322	322	information on:
323	323	(1) the identity of the person obtaining
324	324	access to the information;
325	325	(2) the identity of the individual whose
326	326	information was obtained;
327	327	.229484.2
328	328	- 6 - underscored material = new
329	329	[bracketed material] = delete
330	330	1
331	331	2
332	332	3
333	333	4
334	334	5
335	335	6
336	336	7
337	337	8
338	338	9
339	339	10
340	340	11
341	341	12
342	342	13
343	343	14
344	344	15
345	345	16
346	346	17
347	347	18
348	348	19
349	349	20
350	350	21
351	351	22
352	352	23
353	353	24
354	354	25
355	355	(3) the location from which the information
356	356	was obtained;
357	357	(4) the specific information obtained; and
358	358	(5) the date that the information was
359	359	obtained.
360	360	D. The audit log shall be made available by a
361	361	health information exchange or a health data utility on the
362	362	request of an individual whose health care information is the
363	363	subject of the audit log; provided, however, that the audit log
364	364	made available to the individual shall include only information
365	365	related to that individual. The audit log shall be made
366	366	available to the requesting individual annually for a fee not
367	367	to exceed twenty-five cents ($.25) per page as established by
368	368	the department of health.
369	369	E. A record locator service shall provide a
370	370	mechanism under which individuals may exclude their demographic
371	371	information and information about the location of their
372	372	electronic medical records from the record locator service. A
373	373	person operating a record locator service, a health data
374	374	utility or a health information exchange that receives an
375	375	individual's request to exclude all of the individual's
376	376	information from the record locator service is responsible for
377	377	removing that information from the record locator service
378	378	within thirty days. An individual's request for exclusion of
379	379	information shall be in writing and shall include a waiver of
380	380	.229484.2
381	381	- 7 - underscored material = new
382	382	[bracketed material] = delete
383	383	1
384	384	2
385	385	3
386	386	4
387	387	5
388	388	6
389	389	7
390	390	8
391	391	9
392	392	10
393	393	11
394	394	12
395	395	13
396	396	14
397	397	15
398	398	16
399	399	17
400	400	18
401	401	19
402	402	20
403	403	21
404	404	22
405	405	23
406	406	24
407	407	25
408	408	liability for any harm caused by the exclusion of the
409	409	individual's information.
410	410	F. When information in an individual's electronic
411	411	medical record is requested using a record locator service, a
412	412	health data utility or a health information exchange:
413	413	(1) the requesting provider or health care
414	414	institution shall warrant that the request is for the treatment
415	415	of the individual, is permitted by the individual's written
416	416	authorization or is otherwise permitted by state or federal
417	417	law; and
418	418	(2) the person disclosing the information may
419	419	rely upon the warranty of the person making the request that
420	420	the request is for the treatment of the individual, is
421	421	permitted with the consent of the individual or is otherwise
422	422	permitted by state or federal law.
423	423	G. Notwithstanding any other provision of law,
424	424	information in an individual's electronic medical record may be
425	425	disclosed:
426	426	(1) to a provider that has a need for
427	427	information about the individual to treat a condition that
428	428	poses an immediate threat to the life of any individual and
429	429	that requires immediate medical attention;
430	430	(2) except as provided in the Electronic
431	431	Medical Records Act, to a record locator service, a health data
432	432	utility or a health information exchange for the development
433	433	.229484.2
434	434	- 8 - underscored material = new
435	435	[bracketed material] = delete
436	436	1
437	437	2
438	438	3
439	439	4
440	440	5
441	441	6
442	442	7
443	443	8
444	444	9
445	445	10
446	446	11
447	447	12
448	448	13
449	449	14
450	450	15
451	451	16
452	452	17
453	453	18
454	454	19
455	455	20
456	456	21
457	457	22
458	458	23
459	459	24
460	460	25
461	461	and operation of the record locator service, [and ] the health
462	462	data utility or the health information exchange; [and ] or
463	463	(3) to a provider, health care institution or
464	464	health care group purchaser for treatment, payment or health
465	465	care operation activities, in compliance with the federal
466	466	Health Insurance Portability and Accountability Act of 1996 and
467	467	the regulations promulgated pursuant to that act, and if
468	468	applicable, in compliance with 42 U.S.C. Section 290dd-2 and
469	469	the regulations promulgated pursuant to that section.
470	470	H. For the purposes of this section, "health care
471	471	operation activities" includes administrative, financial, legal
472	472	and quality improvement activities of a covered entity that are
473	473	necessary to conduct business and to support the core functions
474	474	of treatment and payment and are limited to the activities
475	475	listed in the definition of "health care operations" at 45
476	476	C.F.R. 164.501."
477	477	SECTION 4. Section 24-14B-7 NMSA 1978 (being Laws 2009,
478	478	Chapter 69, Section 7) is amended to read:
479	479	"24-14B-7. LIABILITY.--If an individual requests to
480	480	exclude all of the individual's information from the record
481	481	locator service pursuant to Subsection E of Section [6 of the
482	482	Electronic Medical Records Act ] 24-14B-6 NMSA 1978, the record
483	483	locator service, health data utility , health information
484	484	exchange, health care institution or provider shall not be
485	485	liable for any harm to the individual caused by the exclusion
486	486	.229484.2
487	487	- 9 - underscored material = new
488	488	[bracketed material] = delete
489	489	1
490	490	2
491	491	3
492	492	4
493	493	5
494	494	6
495	495	7
496	496	8
497	497	9
498	498	10
499	499	11
500	500	12
501	501	13
502	502	14
503	503	15
504	504	16
505	505	17
506	506	18
507	507	19
508	508	20
509	509	21
510	510	22
511	511	23
512	512	24
513	513	25
514	514	of the individual's information."
515	515	SECTION 5. Section 24-14B-8 NMSA 1978 (being Laws 2009,
516	516	Chapter 69, Section 8) is amended to read:
517	517	"24-14B-8. OUT-OF-STATE DISCLOSURES.--A disclosure
518	518	otherwise permissible under the Electronic Medical Records Act
519	519	may be made to providers, health care group purchasers, health
520	520	care institutions, health data utilities , health information
521	521	exchanges or record locator services located or operating
522	522	outside of the state."
523	523	SECTION 6. Section 24-14B-10 NMSA 1978 (being Laws 2009,
524	524	Chapter 69, Section 10) is amended to read:
525	525	"24-14B-10. STATE AGENCY--ELECTRONIC MEDICAL RECORDS.--If
526	526	a state agency requires the use of electronic medical records
527	527	for any type of health care or health coverage program, the
528	528	agency shall allow a health care group purchaser, health care
529	529	institution, health data utility , health information exchange,
530	530	provider, record locator service or any other person to use any
531	531	public, proprietary or open source hardware or software;
532	532	provided that the hardware or software complies with federal
533	533	interoperability-certified laws or rules."
534	534	SECTION 7. A new section of the Electronic Medical
535	535	Records Act is enacted to read:
536	536	"[NEW MATERIAL] SELECTION OF STATE HEALTH DATA UTILITY.--
537	537	The entity designated as the state's health information
538	538	exchange shall also function as the state's health data
539	539	.229484.2
540	540	- 10 - underscored material = new
541	541	[bracketed material] = delete
542	542	1
543	543	2
544	544	3
545	545	4
546	546	5
547	547	6
548	548	7
549	549	8
550	550	9
551	551	10
552	552	11
553	553	12
554	554	13
555	555	14
556	556	15
557	557	16
558	558	17
559	559	18
560	560	19
561	561	20
562	562	21
563	563	22
564	564	23
565	565	24
566	566	25
567	567	utility."
568	568	- 11 -
569	569	.229484.2