1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 83rd OREGON LEGISLATIVE ASSEMBLY--2025 Regular Session A-Engrossed Senate Bill 835 Ordered by the Senate April 10 Including Senate Amendments dated April 10 Printed pursuant to Senate Interim Rule 213.28 by order of the President of the Senate in conformance with pre- session filing rules, indicating neither advocacy nor opposition on the part of the President (at the request of Governor Tina Kotek for Oregon Health Authority) SUMMARY The following summary is not prepared by the sponsors of the measure and is not a part of the body thereof subject to consideration by the Legislative Assembly. It is an editor’s brief statement of the essential features of the measure. The statement includes a measure digest written in compliance with applicable readability standards. Digest: The Act tells OHA to work with the nine tribes in Oregon to adopt rules for collecting tribal data. (Flesch Readability Score: 67.3). [Digest: The Act tells OHA and ODHS to work with the nine tribes in Oregon to adopt rules for collecting tribal data.(Flesch Readability Score: 68.6).] Directs the Oregon Health Authority, in collaboration with [the Department of Human Services and] the nine federally recognized Indian tribes in Oregon, to adopt rules governing the collection, storage and use of data on tribal affiliation. Declares an emergency, effective on passage. A BILL FOR AN ACT Relating to tribal affiliation data; creating new provisions; amending ORS 413.161, 413.163, 413.164 and 442.373; and declaring an emergency. Be It Enacted by the People of the State of Oregon: SECTION 1. ORS 413.161 is amended to read: 413.161. (1)(a) The Oregon Health Authority, in collaboration with the Department of Human Services, shall adopt by rule uniform standards, based on local, statewide and national best prac- tices, for the collection of data on race, ethnicity, preferred spoken and written languages, disability status, sexual orientation and gender identity. The authority and the department shall use the standards, to the greatest extent practicable, in surveys conducted and in all programs in which the authority or the department collects, records or reports the data described in this subsection for the evaluation of health-related outcomes . The authority and the department shall review and update the standards at least once every two years to ensure that the standards are efficient, uni- form and consistent with best practices. [(2)] (b) The authority shall appoint an advisory committee in accordance with ORS 183.333 composed of individuals likely to be affected by the standards adopted under this subsection and advocates for individuals likely to be affected by the standards. (2) The authority, in collaboration with the nine federally recognized Indian tribes in Oregon, shall adopt by rule uniform standards, based on local, statewide and national best practices, for the collection, storage and use of data on tribal affiliation.The standards shall protect the right of each tribe to govern the collection, storage and use of that tribe’s data. The authority shall use the standards in surveys conducted and in all programs in which the authority collects, records or reports the data described in this subsection for the evaluation NOTE:Matter in boldfaced type in an amended section is new; matter [italic and bracketed] is existing law to be omitted. New sections are in boldfaced type. LC 413 A-Eng. SB 835 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 of health-related outcomes. The authority, in collaboration with the nine federally recognized Indian tribes in Oregon, shall review and update the standards at least once every two years to ensure that the standards are efficient, uniform and consistent with best practices. (3) Any data collected by the authority or the department in accordance with uniform standards adopted under [subsection (1) of] this section is subject to ORS 413.164 (4). SECTION 2. ORS 413.163 is amended to read: 413.163. The Oregon Health Authority shall establish a data system for data on race, ethnicity, preferred spoken and written languages, disability status, tribal affiliation, sexual orientation and gender identity collected under ORS 413.164. The data system established under this section must include: (1) A data registry to receive and store the data described in this section from coordinated care organizations, health care providers and health insurers, patients, clients and members of coordi- nated care organizations, health care providers and health insurers, the authority and the Depart- ment of Human Services. The registry must allow for coordinated care organizations, health care providers and health insurers to: (a) Electronically submit data collected under ORS 413.164; and (b) Query the data registry to determine whether the registry contains current data for a pa- tient, member or client. (2) Functionality that allows a patient, member or client to directly submit to the data system their data described in this section. SECTION 3. ORS 413.164 is amended to read: 413.164. (1) As used in this section and ORS 413.163 and 413.167: (a) “Board” means the: (A) State Board of Examiners for Speech-Language Pathology and Audiology; (B) State Board of Chiropractic Examiners; (C) State Board of Licensed Social Workers; (D) Oregon Board of Licensed Professional Counselors and Therapists; (E) Oregon Board of Dentistry; (F) State Board of Massage Therapists; (G) Oregon Board of Naturopathic Medicine; (H) Oregon State Board of Nursing; (I) Oregon Board of Optometry; (J) State Board of Pharmacy; (K) Oregon Medical Board; (L) Occupational Therapy Licensing Board; (M) Oregon Board of Physical Therapy; (N) Oregon Board of Psychology; (O) Board of Medical Imaging; (P) Long Term Care Administrators Board; (Q) State Board of Direct Entry Midwifery; (R) State Board of Denture Technology; (S) Respiratory Therapist and Polysomnographic Technologist Licensing Board; (T) Board of Licensed Dietitians; and (U) Oregon Health Authority, to the extent that the authority: (i) Licenses emergency medical services providers under ORS 682.216; and [2] A-Eng. SB 835 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 (ii) Regulates traditional health workers under ORS 414.665. (b) “Coordinated care organization” has the meaning given that term in ORS 414.025. (c) “Health care provider” means an individual licensed, certified, registered or otherwise au- thorized to practice by a board. (d) “Health insurer” has the meaning given that term in ORS 746.600. (2) At least once each calendar year and in accordance with timelines established by the au- thority by rule, a coordinated care organization, a health care provider or health care provider’s designee, or a health insurer shall collect data on race, ethnicity, preferred spoken and written languages, disability status, tribal affiliation, sexual orientation and gender identity from the co- ordinated care organization’s, health care provider’s or health insurer’s patients, clients and mem- bers, in accordance with standards adopted by the authority pursuant to ORS 413.161. A coordinated care organization, health care provider or health insurer shall submit the data to the authority in the manner prescribed by the authority by rule. (3)(a) The authority shall adopt rules, including but not limited to rules: (A) Establishing standards for collecting, securely transmitting and reporting the data described in subsection (2) of this section; (B) Establishing the timelines for collection and submission of data described in subsection (2) of this section; (C) Permitting coordinated care organizations, health care providers and health insurers to re- port to the authority that a patient, client or member refused to answer questions regarding race, ethnicity, preferred spoken and written languages, disability status,tribal affiliation, sexual orien- tation and gender identity; (D) Establishing criteria for extensions of timelines established under this subsection and a process for reviewing requests for extensions; and (E) Establishing criteria for exempting certain health care providers or classes of health care providers from the requirements of subsection (2) of this section and a process for reviewing re- quests for exemptions. (b) In adopting rules under subsection (2) of this section, the authority shall: (A) Consult with the advisory committee established under ORS 413.161; (B) Collaborate with the nine federally recognized Indian tribes in Oregon on rules re- garding the collection, storage and use of tribal affiliation data; [(B)] (C) Allow coordinated care organizations, health care providers and health insurers to collect the data described in subsection (2) of this section on electronic or paper forms; and [(C)](D) Require coordinated care organizations, health care providers and health insurers to inform patients, clients and members: (i) That data collected under subsection (2) of this section is reported to the authority; (ii) How the authority, coordinated care organization, health care provider and health insurer use the data; (iii) Of the purposes for which the data may not be used; and (iv) That the patient, client or member is not required to answer questions regarding race, ethnicity, preferred spoken and written languages, disability status, tribal affiliation, sexual orien- tation and gender identity. (4)(a) Data collected under this section is confidential and not subject to disclosure under ORS 192.311 to 192.478. The authority may release the data collected under this section only if the data to be released is anonymized and aggregated so that the data released does not reasonably allow [3] A-Eng. SB 835 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 an individual whose information is included in the data to be identified. (b) The authority may not release data collected under this section regarding tribal af- filiation unless the release of that data is allowed by a written data use agreement entered into by the authority and the affected tribe. (5) A coordinated care organization or health insurer transacting insurance in this state may not consider any data collected under subsection (2) of this section: (a) In determining whether to deny, limit, cancel, rescind or refuse to renew an insurance policy; (b) To establish premium rates for an insurance policy; or (c) To establish the terms and conditions of an insurance policy. (6) The authority may provide incentives to coordinated care organizations, health care provid- ers and health insurers to assist in deferring the costs of making changes to electronic health re- cords systems or similar systems to facilitate the collection of data described in subsection (2) of this section. (7)(a) The authority shall monitor coordinated care organizations, health care providers and health insurers for compliance with the standards established under subsection (1) of this section. (b) The authority may impose on a coordinated care organization, health care provider or health insurer a civil penalty for a violation of the requirements of this section or rules adopted under this section: (A) Not to exceed $200 for the first violation; (B) Not to exceed $400 for the second violation; and (C) Not to exceed $500 for the third and subsequent violations. (c) Prior to imposing a penalty under paragraph (b) of this subsection, the authority shall pro- vide notice to the coordinated care organization, health care provider or health insurer of the al- leged violation and provide the coordinated care organization, health care provider or health insurer a reasonable time in which to correct the violation. SECTION 4. ORS 442.373 is amended to read: 442.373. (1) The Oregon Health Authority shall establish and maintain a program that requires reporting entities to report health care data for the following purposes: (a) Determining the maximum capacity and distribution of existing resources allocated to health care. (b) Identifying the demands for health care. (c) Allowing health care policymakers to make informed choices. (d) Evaluating the effectiveness of intervention programs in improving health outcomes. (e) Comparing the costs and effectiveness of various treatment settings and approaches. (f) Providing information to consumers and purchasers of health care. (g) Improving the quality and affordability of health care and health care coverage. (h) Assisting the authority in furthering the health policies expressed by the Legislative As- sembly in ORS 442.310. (i) Evaluating health disparities, including but not limited to disparities related to race and ethnicity. (2) The authority shall prescribe by rule standards that: (a) Establish the time, place, form and manner of reporting data under this section, including but not limited to: (A) Requiring the use of unique patient and provider identifiers; (B) Specifying a uniform coding system that reflects all health care utilization and costs for [4] A-Eng. SB 835 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 health care services provided to Oregon residents in other states; and (C) Establishing enrollment thresholds below which reporting will not be required. (b) Establish the types of data to be reported under this section, including but not limited to: (A) Health care claims and enrollment data used by reporting entities and paid health care claimsdata; (B) Reports, schedules, statistics or other data relating to health care costs, prices, quality, utilization or resources determined by the authority to be necessary to carry out the purposes of this section; and (C) Data related to race, ethnicity, disability, tribal affiliation, sexual orientation, gender identity and primary language collected in a manner consistent with ORS 413.161. (3) Any third party administrator that is not required to obtain a license under ORS 744.702 and that is legally responsible for payment of a claim for a health care item or service provided to an Oregon resident may report to the authority the health care data described in subsection (2) of this section. (4) The authority shall adopt rules establishing requirements for reporting entities to train pro- viders on protocols for collecting race, ethnicity, disability, tribal affiliation, sexual orientation, gender identity and primary language data in a culturally competent manner. (5)(a) The authority shall use data collected under this section to provide information to con- sumers of health care to empower the consumers to make economically sound and medically appro- priate decisions. The information must include, but not be limited to, the prices and quality of health careservices. (b) The authority shall, using only data collected under this section from reporting entities de- scribed in ORS 442.372 (1) to (3), post to its website health care price information including the median prices paid by the reporting entities to hospitals and hospital outpatient clinics for, at a minimum, the 50 most common inpatient procedures and the 100 most common outpatient proce- dures. (c) The health care price information posted to the website must be: (A) Displayed in a consumer friendly format; (B) Easily accessible by consumers; and (C) Updated at least annually to reflect the most recent data available. (d) The authority shall apply for and receive donations, gifts and grants from any public or private source to pay the cost of posting health care price information to its website in accordance with this subsection. Moneys received shall be deposited to the Oregon Health Authority Fund. (e) The obligation of the authority to post health care price information to its website as re- quired by this subsection is limited to the extent of any moneys specifically appropriated for that purpose or available from donations, gifts and grants from private or public sources. (6) The authority may contract with a third party to collect and process the health care data reported under this section. The contract must prohibit the collection of Social Security numbers and must prohibit the disclosure or use of the data for any purpose other than those specifically authorized by the contract.The contract must require the third party to transmit all data collected and processed under the contract to the authority. (7) The authority shall facilitate a collaboration between the Department of Human Services, the authority, the Department of Consumer and Business Services and interested stakeholders to de- velop a comprehensive health care information system using the data reported under this section and collected by the authority under ORS 442.370 and 442.400 to 442.463. The authority, in consul- [5] A-Eng. SB 835 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 tation with interested stakeholders, shall: (a) Formulate the data sets that will be included in the system; (b) Establish the criteria and procedures for the development of limited use data sets; (c) Establish the criteria and procedures to ensure that limited use data sets are accessible and compliant with federal and state privacy laws; and (d) Establish a time frame for the creation of the comprehensive health care information system. (8) Information disclosed through the comprehensive health care information system described in subsection (7) of this section: (a) Shall be available, when disclosed in a form and manner that ensures the privacy and secu- rity of personal health information as required by state and federal laws, as a resource to re- searchers, insurers, employers, providers, purchasers of health care and state agencies to allow for continuous review of health care utilization, expenditures and performance in this state; (b) Shall be available to Oregon programs for quality in health care for use in improving health care in Oregon, subject to rules prescribed by the authority conforming to state and federal privacy laws or limiting access to limited use data sets; (c) Shall be presented to allow for comparisons of geographic, demographic and economic factors and institutional size; and (d) May not disclose trade secrets of reporting entities or self-funded, employer-sponsored health insurance plans regulated under the Employee Retirement Income Security Act of 1974, as codified and amended at 29 U.S.C. 1001, et seq., that report health care data voluntarily. (9) The collection, storage and release of health care data and other information under this section is subject to the requirements of the federal Health Insurance Portability and Accountability Act. (10)(a) Notwithstanding subsection (9) of this section, in addition to the comprehensive health care information system described in subsection (7) of this section, the Department of Consumer and Business Services shall be allowed to access, use and disclose data collected under this section by certifying in writing that the data will be used only to carry out the department’s duties. (b) Personally identifiable information disclosed to the department under paragraph (a) of this subsection, including a consumer’s name, address, telephone number or electronic mail address, is confidential and not subject to further disclosure under ORS 192.311 to 192.478. (11) The authority may impose a charge for information disclosed to researchers, insurers, em- ployers, providers and purchasers of health care under subsection (8) of this section in an amount necessary to cover the authority’s actual costs for collecting and releasing the information that is requested. SECTION 5. The Oregon Health Authority may not collect, store or use any tribal affil- iation data until the authority, in collaboration with the nine federally recognized Indian tribes in Oregon, has adopted, in accordance with ORS 413.161, uniform standards for the collection, storage and use of such data. SECTION 6.(1) The amendments to ORS 413.161, 413.163, 413.164 and 442.373 by sections 1 to 4 of this 2025 Act become operative on January 1, 2026. (2) The Oregon Health Authority may take any action before the operative date specified in subsection (1) of this section that is necessary to enable the authority to exercise, on and after the operative date specified in subsection (1) of this section, all the duties, functions and powers conferred on the authority by the amendments to ORS 413.161, 413.163, 413.164 and 442.373 by sections 1 to 4 of this 2025 Act. [6] A-Eng. SB 835 1 2 3 4 SECTION 7. This 2025 Act being necessary for the immediate preservation of the public peace, health and safety, an emergency is declared to exist, and this 2025 Act takes effect on its passage. [7]