Texas 2015 - 84th Regular

Texas House Bill HB1319 Compare Versions

Only one version of the bill is available at this time.
OldNewDifferences
11 84R7121 SCL-F
22 By: Zerwas H.B. No. 1319
33
44
55 A BILL TO BE ENTITLED
66 AN ACT
77 relating to use of health information technology in this state;
88 creating a criminal offense.
99 BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
1010 SECTION 1. Title 4, Civil Practice and Remedies Code, is
1111 amended by adding Chapter 74A to read as follows:
1212 CHAPTER 74A. LIMITATION OF LIABILITY RELATING TO HEALTH
1313 INFORMATION EXCHANGES
1414 Sec. 74A.001. DEFINITIONS. In this chapter:
1515 (1) "Health care provider" means any individual,
1616 partnership, professional association, corporation, facility, or
1717 institution duly licensed, certified, registered, or chartered by
1818 this state to provide health care or medical care, including a
1919 physician. The term includes:
2020 (A) an officer, director, shareholder, member,
2121 partner, manager, owner, or affiliate of a physician or other
2222 health care provider; and
2323 (B) an employee, independent contractor, or
2424 agent of a physician or other health care provider acting in the
2525 course and scope of the employment or contractual relationship.
2626 (2) "Health information exchange" has the meaning
2727 assigned by Section 182.151, Health and Safety Code. The term
2828 includes:
2929 (A) an officer, director, shareholder, member,
3030 partner, manager, owner, or affiliate of the health information
3131 exchange; and
3232 (B) an employee, independent contractor, or
3333 agent of the health information exchange acting in the course and
3434 scope of the employment or contractual relationship.
3535 (3) "Physician" means:
3636 (A) an individual licensed to practice medicine
3737 in this state under Subtitle B, Title 3, Occupations Code;
3838 (B) a professional association organized by an
3939 individual physician or a group of physicians;
4040 (C) a partnership or limited liability
4141 partnership formed by a group of physicians;
4242 (D) a limited liability company formed by a group
4343 of physicians;
4444 (E) a nonprofit health corporation certified by
4545 the Texas Medical Board under Chapter 162, Occupations Code; or
4646 (F) a single legal entity authorized to practice
4747 medicine in this state owned by a group of physicians.
4848 Sec. 74A.002. LIMITATION ON LIABILITY OF HEALTH CARE
4949 PROVIDERS RELATING TO HEALTH INFORMATION EXCHANGES. (a) The use
5050 of, failure to use, or existence of a health information exchange
5151 does not establish a standard of care applicable to a health care
5252 provider for obtaining, using, or disclosing patient information.
5353 (b) Unless a health care provider acts with intent or gross
5454 negligence, the health care provider is not liable for any damages,
5555 penalties, or other relief related to:
5656 (1) the health care provider's or another health care
5757 provider's obtainment of or failure to obtain patient information
5858 from a health information exchange;
5959 (2) the health care provider's or another health care
6060 provider's disclosure of or failure to disclose patient information
6161 to a health information exchange;
6262 (3) the health care provider's or another health care
6363 provider's reliance on inaccurate patient information obtained
6464 from or disclosed by a health information exchange; or
6565 (4) the obtainment, use, or disclosure by a health
6666 information exchange, another health care provider, or any other
6767 person, in violation of federal or state law, of any patient
6868 information that the health care provider provided to a health
6969 information exchange or to another health care provider in
7070 compliance with the Health Insurance Portability and
7171 Accountability Act of 1996 (42 U.S.C. Section 1320d et seq.) and
7272 other applicable federal and state law.
7373 (c) Nothing in this section may be construed to create a
7474 cause of action or to create a standard of care, obligation, or duty
7575 that provides a basis for a cause of action.
7676 Sec. 74A.003. LIMITATION ON LIABILITY OF HEALTH INFORMATION
7777 EXCHANGES. (a) Unless a health information exchange acts with
7878 intent or gross negligence, the health information exchange is not
7979 liable for any damages, penalties, or other relief related to:
8080 (1) a health care provider's obtainment of or failure
8181 to obtain patient information from the health information exchange;
8282 (2) a health care provider's disclosure of or failure
8383 to disclose patient information to the health information exchange;
8484 (3) a health care provider's reliance on inaccurate
8585 patient information obtained from or disclosed by the health
8686 information exchange; or
8787 (4) the obtainment, use, or disclosure by a health
8888 care provider or any other person, in violation of federal or state
8989 law, of any patient information that was provided to the person by
9090 the health information exchange in compliance with:
9191 (A) the Health Insurance Portability and
9292 Accountability Act of 1996 (42 U.S.C. Section 1320d et seq.) and
9393 other applicable federal and state law; and
9494 (B) the health information exchange's policies.
9595 (b) Nothing in this section may be construed to create a
9696 cause of action or to create a standard of care, obligation, or duty
9797 that provides a basis for a cause of action.
9898 SECTION 2. Section 531.0162, Government Code, is amended by
9999 adding Subsections (e) and (f) to read as follows:
100100 (e) The executive commissioner shall ensure that:
101101 (1) all information systems available for use by the
102102 commission or a health and human services agency in sending
103103 protected health information to a health care provider or receiving
104104 protected health information from a health care provider, and for
105105 which planning or procurement begins on or after September 1, 2015,
106106 are capable of sending or receiving that information in accordance
107107 with the applicable data exchange standards developed by the
108108 appropriate standards development organization accredited by the
109109 American National Standards Institute;
110110 (2) if national data exchange standards do not exist
111111 for a system described by Subdivision (1), the commission makes
112112 every effort to ensure the system is interoperable with the
113113 national standards for electronic health record systems; and
114114 (3) the commission and each health and human services
115115 agency establish an interoperability standards plan for all
116116 information systems that exchange protected health information
117117 with health care providers.
118118 (f) Not later than December 1 of each even-numbered year,
119119 the executive commissioner shall report to the governor and the
120120 Legislative Budget Board on the commission's and the health and
121121 human services agencies' progress in ensuring that the information
122122 systems described in Subsection (e) are interoperable with one
123123 another and meet the appropriate standards specified by that
124124 subsection.
125125 SECTION 3. Section 81.044(a), Health and Safety Code, is
126126 amended to read as follows:
127127 (a) The board shall prescribe the form and method of
128128 reporting under this chapter, which may be in writing, by
129129 telephone, by electronic data transmission, through a health
130130 information exchange as defined by Section 182.151 if requested and
131131 authorized by the person required to report, or by other means.
132132 SECTION 4. Section 82.008(a), Health and Safety Code, is
133133 amended to read as follows:
134134 (a) To ensure an accurate and continuing source of data
135135 concerning cancer, each health care facility, clinical laboratory,
136136 and health care practitioner shall furnish to the department [board
137137 or its representative], on request, data the board considers
138138 necessary and appropriate that is derived from each medical record
139139 pertaining to a case of cancer that is in the custody or under the
140140 control of the health care facility, clinical laboratory, or health
141141 care practitioner. The department may not request data that is more
142142 than three years old unless the department is investigating a
143143 possible cancer cluster. At the request and with the authorization
144144 of the applicable health care facility, clinical laboratory, or
145145 health care practitioner, data may be furnished to the department
146146 through a health information exchange as defined by Section
147147 182.151.
148148 SECTION 5. Section 161.007(d), Health and Safety Code, is
149149 amended to read as follows:
150150 (d) A health care provider who administers an immunization
151151 to an individual younger than 18 years of age shall provide data
152152 elements regarding an immunization to the department. A health
153153 care provider who administers an immunization to an individual 18
154154 years of age or older may submit data elements regarding an
155155 immunization to the department. At the request and with the
156156 authorization of the health care provider, the data elements may be
157157 provided through a health information exchange as defined by
158158 Section 182.151. The data elements shall be submitted in a format
159159 prescribed by the department. The department shall verify consent
160160 before including the information in the immunization
161161 registry. The department may not retain individually identifiable
162162 information about an individual for whom consent cannot be
163163 verified.
164164 SECTION 6. Section 161.00705(a), Health and Safety Code, is
165165 amended to read as follows:
166166 (a) The department shall maintain a registry of persons who
167167 receive an immunization, antiviral, and other medication
168168 administered to prepare for a potential disaster, public health
169169 emergency, terrorist attack, hostile military or paramilitary
170170 action, or extraordinary law enforcement emergency or in response
171171 to a declared disaster, public health emergency, terrorist attack,
172172 hostile military or paramilitary action, or extraordinary law
173173 enforcement emergency. A health care provider who administers an
174174 immunization, antiviral, or other medication shall provide the data
175175 elements to the department. At the request and with the
176176 authorization of the health care provider, the data elements may be
177177 provided through a health information exchange as defined by
178178 Section 182.151.
179179 SECTION 7. Section 161.00706(b), Health and Safety Code, is
180180 amended to read as follows:
181181 (b) A health care provider, on receipt of a request under
182182 Subsection (a)(1), shall submit the data elements to the department
183183 in a format prescribed by the department. At the request and with
184184 the authorization of the health care provider, the data elements
185185 may be submitted through a health information exchange as defined
186186 by Section 182.151. The department shall verify the person's
187187 request before including the information in the immunization
188188 registry.
189189 SECTION 8. Chapter 182, Health and Safety Code, is amended
190190 by adding Subchapter D to read as follows:
191191 SUBCHAPTER D. HEALTH INFORMATION EXCHANGES
192192 Sec. 182.151. DEFINITION. In this subchapter, "health
193193 information exchange" means an organization that:
194194 (1) assists in the transmission or receipt of
195195 health-related information among organizations transmitting or
196196 receiving the information according to nationally recognized
197197 standards and under an express written agreement with the
198198 organizations;
199199 (2) as a primary business function, compiles or
200200 organizes health-related information designed to be securely
201201 transmitted by the organization among physicians, other health care
202202 providers, or entities within a region, state, community, or
203203 hospital system; or
204204 (3) assists in the transmission or receipt of
205205 electronic health-related information among physicians, other
206206 health care providers, or entities within:
207207 (A) a hospital system;
208208 (B) a physician organization;
209209 (C) a health care collaborative, as defined by
210210 Section 848.001, Insurance Code;
211211 (D) a Pioneer Model accountable care
212212 organization established under the initiative by the Centers for
213213 Medicare and Medicaid Services Innovation Center; or
214214 (E) an accountable care organization
215215 participating in the Medicare Shared Savings Program under 42
216216 U.S.C. Section 1395jjj.
217217 Sec. 182.152. AUTHORITY OF HEALTH INFORMATION EXCHANGE.
218218 (a) Notwithstanding Sections 81.046, 82.009, and 161.0073, a health
219219 information exchange may access and transmit health-related
220220 information under Sections 81.044(a), 82.008(a), 161.007(d),
221221 161.00705(a), and 161.00706(b) if the access or transmittal is:
222222 (1) made for the purpose of assisting in the reporting
223223 of health-related information to the appropriate agency;
224224 (2) requested and authorized by the appropriate health
225225 care provider, practitioner, physician, facility, clinical
226226 laboratory, or other person who is required to report
227227 health-related information; and
228228 (3) made in accordance with the requirements of this
229229 subchapter and all other state and federal law.
230230 (b) A health information exchange may only use and disclose
231231 the information that it accesses or transmits under Subsection (a)
232232 in compliance with this subchapter and all applicable state and
233233 federal law, and may not exchange, sell, trade, or otherwise make
234234 any prohibited use or disclosure of the information.
235235 Sec. 182.153. COMPLIANCE WITH LAW; SECURITY. A health
236236 information exchange that collects, transmits, disseminates,
237237 accesses, or reports health-related information under this
238238 subchapter shall comply with all applicable state and federal law,
239239 including secure electronic data submission requirements.
240240 Sec. 182.154. CRIMINAL PENALTY. (a) A person who collects,
241241 transmits, disseminates, accesses, or reports information under
242242 this subchapter on behalf of or as a health information exchange
243243 commits an offense if the person, with the intent to violate this
244244 subchapter, allows health-related information in the possession of
245245 a health information exchange to be used or disclosed in a manner
246246 that violates this subchapter.
247247 (b) An offense under this section is a Class A misdemeanor.
248248 SECTION 9. Chapter 74A, Civil Practice and Remedies Code,
249249 as added by this Act, applies only to a cause of action that accrues
250250 on or after the effective date of this Act. A cause of action that
251251 accrues before the effective date of this Act is governed by the law
252252 in effect immediately before the effective date of this Act, and
253253 that law is continued in effect for that purpose.
254254 SECTION 10. This Act takes effect September 1, 2015.