Texas 2015 - 84th Regular

Texas Senate Bill SB203 Compare Versions

OldNewDifferences
1-84R22863 AJZ-D
2- By: Nelson, et al. S.B. No. 203
3- (Raymond, Burkett, Price, Zerwas, Keough)
4- Substitute the following for S.B. No. 203: No.
1+S.B. No. 203
52
63
7- A BILL TO BE ENTITLED
84 AN ACT
95 relating to the continuation and functions of the Texas Health
106 Services Authority as a quasi-governmental entity and the
117 electronic exchange of health care information.
128 BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
139 SECTION 1. Section 531.904, Government Code, is amended by
1410 amending Subsections (c) and (g) and adding Subsections (c-1) and
1511 (c-2) to read as follows:
1612 (c) The advisory committee must include the following
1713 members:
1814 (1) Medicaid providers;
1915 (2) child health plan program providers;
2016 (3) fee-for-service providers;
2117 (4) [at least one representative of the Texas Health
2218 Services Authority established under Chapter 182, Health and Safety
2319 Code;
2420 [(5)] at least one representative of each health and
2521 human services agency;
2622 (5) [(6)] at least one representative of a major
2723 provider association;
2824 (6) [(7)] at least one representative of a health care
2925 facility;
3026 (7) [(8)] at least one representative of a managed
3127 care organization;
3228 (8) [(9)] at least one representative of the
3329 pharmaceutical industry;
3430 (9) [(10)] at least one representative of Medicaid
3531 recipients and child health plan enrollees;
3632 (10) [(11)] at least one representative of a local or
3733 regional health information exchange; and
3834 (11) [(12)] at least one representative who is skilled
3935 in pediatric medical informatics.
4036 (c-1) Notwithstanding Subsection (c), the advisory
4137 committee must include at least one representative of the Texas
4238 Health Services Authority established under Chapter 182, Health and
4339 Safety Code. This subsection expires September 1, 2021.
4440 (c-2) Notwithstanding Subsection (c), on and after
4541 September 1, 2021, the advisory committee must include at least one
4642 representative of the private nonprofit organization with relevant
4743 knowledge and experience in establishing statewide health
4844 information exchange capabilities designated under Section
4945 182.108(j), Health and Safety Code.
5046 (g) The advisory committee shall collaborate with the Texas
5147 Health Services Authority to ensure that the health information
5248 exchange system is interoperable with, and not an impediment to,
5349 the electronic health information infrastructure that the
5450 authority assists in developing. This subsection expires September
5551 1, 2021.
5652 SECTION 2. Section 181.206, Health and Safety Code, is
5753 amended by amending Subsection (a) and adding Subsection (a-1) to
5854 read as follows:
5955 (a) The commission, in coordination with the attorney
6056 general[, the Texas Health Services Authority,] and the Texas
6157 Department of Insurance:
6258 (1) may request that the United States secretary of
6359 health and human services conduct an audit of a covered entity, as
6460 that term is defined by 45 C.F.R. Section 160.103, in this state to
6561 determine compliance with the Health Insurance Portability and
6662 Accountability Act and Privacy Standards; and
6763 (2) shall periodically monitor and review the results
6864 of audits of covered entities in this state conducted by the United
6965 States secretary of health and human services.
7066 (a-1) Notwithstanding Subsection (a), the commission shall
7167 also coordinate with the Texas Health Services Authority when
7268 requesting an audit or monitoring and reviewing the results of an
7369 audit under Subsection (a). This subsection expires September 1,
7470 2021.
7571 SECTION 3. Section 181.207, Health and Safety Code, is
7672 amended to read as follows:
7773 Sec. 181.207. FUNDING. (a) The commission and the Texas
7874 Department of Insurance[, in consultation with the Texas Health
7975 Services Authority,] shall apply for and actively pursue available
8076 federal funding for enforcement of this chapter.
8177 (b) Notwithstanding Subsection (a), the commission and the
8278 Texas Department of Insurance shall consult with the Texas Health
8379 Services Authority when applying for or pursuing federal funding
8480 under Subsection (a). This subsection expires September 1, 2021.
8581 SECTION 4. The heading to Chapter 182, Health and Safety
8682 Code, is amended to read as follows:
8783 CHAPTER 182. ELECTRONIC EXCHANGE OF HEALTH INFORMATION [TEXAS
8884 HEALTH SERVICES AUTHORITY]
8985 SECTION 5. Subchapter A, Chapter 182, Health and Safety
9086 Code, is amended by adding Section 182.003 to read as follows:
9187 Sec. 182.003. EXPIRATION OF SUBCHAPTER. This subchapter
9288 expires September 1, 2021.
9389 SECTION 6. Section 182.052, Health and Safety Code, is
9490 amended to read as follows:
9591 Sec. 182.052. EXPIRATION OF SUBCHAPTER [APPLICATION OF
9692 SUNSET ACT]. This subchapter [The corporation is subject to
9793 Chapter 325, Government Code. Unless continued in existence as
9894 provided by that chapter, the corporation is abolished and this
9995 chapter] expires September 1, 2021 [2015. The governor may order
10096 the dissolution of the corporation at any time the governor
10197 declares that the purposes of the corporation have been fulfilled
10298 or that the corporation is inoperative or abandoned].
10399 SECTION 7. Section 182.053, Health and Safety Code, as
104100 amended by S.B. 219, Acts of the 84th Legislature, Regular Session,
105101 2015, is amended by amending Subsections (a) and (b) and adding
106102 Subsections (b-1) and (h) to read as follows:
107103 (a) The corporation is governed by a board of 12 [11]
108104 directors appointed by the governor, with the advice and consent of
109105 the senate.
110106 (b) The governor shall also appoint at least two ex officio,
111107 nonvoting members representing the health and human services
112108 agencies as state agency data resources [department].
113109 (b-1) The governor shall appoint as a voting board member
114110 one individual who represents Texas local health information
115111 exchanges.
116112 (h) In this section, "health and human services agencies"
117113 includes the:
118114 (1) department;
119115 (2) Department of Aging and Disability Services;
120116 (3) Department of Assistive and Rehabilitative
121117 Services;
122118 (4) Department of Family and Protective Services; and
123119 (5) commission.
124120 SECTION 8. Section 182.101, Health and Safety Code, is
125121 amended to read as follows:
126122 Sec. 182.101. GENERAL POWERS AND DUTIES. (a) The
127123 corporation may:
128124 (1) establish statewide health information exchange
129125 capabilities, including capabilities for electronic laboratory
130126 results, diagnostic studies, and medication history delivery, and,
131127 where applicable, promote definitions and standards for electronic
132128 interactions statewide;
133129 (2) seek funding to:
134130 (A) implement, promote, and facilitate the
135131 voluntary exchange of secure electronic health information between
136132 and among individuals and entities that are providing or paying for
137133 health care services or procedures; and
138134 (B) create incentives to implement, promote, and
139135 facilitate the voluntary exchange of secure electronic health
140136 information between and among individuals and entities that are
141137 providing or paying for health care services or procedures;
142138 (3) establish statewide health information exchange
143139 capabilities for streamlining health care administrative functions
144140 including:
145141 (A) communicating point of care services,
146142 including laboratory results, diagnostic imaging, and prescription
147143 histories;
148144 (B) communicating patient identification and
149145 emergency room required information in conformity with state and
150146 federal privacy laws;
151147 (C) real-time communication of enrollee status
152148 in relation to health plan coverage, including enrollee
153149 cost-sharing responsibilities; and
154150 (D) current census and status of health plan
155151 contracted providers;
156152 (4) support regional health information exchange
157153 initiatives by:
158154 (A) identifying data and messaging standards for
159155 health information exchange;
160156 (B) administering programs providing financial
161157 incentives, including grants and loans for the creation and support
162158 of regional health information networks, subject to available
163159 funds;
164160 (C) providing technical expertise where
165161 appropriate;
166162 (D) sharing intellectual property developed
167163 under Section 182.105;
168164 (E) waiving the corporation's fees associated
169165 with intellectual property, data, expertise, and other services or
170166 materials provided to regional health information exchanges
171167 operated on a nonprofit basis; and
172168 (F) applying operational and technical standards
173169 developed by the corporation to existing health information
174170 exchanges only on a voluntary basis, except for standards related
175171 to ensuring effective privacy and security of individually
176172 identifiable health information;
177173 (5) identify standards for streamlining health care
178174 administrative functions across payors and providers, including
179175 electronic patient registration, communication of enrollment in
180176 health plans, and information at the point of care regarding
181177 services covered by health plans; and
182178 (6) support the secure, electronic exchange of health
183179 information through other strategies identified by the board.
184180 (b) This section expires September 1, 2021.
185181 SECTION 9. Section 182.102, Health and Safety Code, is
186182 amended by adding Subsection (c) to read as follows:
187183 (c) This section expires September 1, 2021.
188184 SECTION 10. Section 182.103, Health and Safety Code, is
189185 amended by adding Subsection (d) to read as follows:
190186 (d) This section expires September 1, 2021.
191187 SECTION 11. Section 182.104, Health and Safety Code, is
192188 amended to read as follows:
193189 Sec. 182.104. SECURITY COMPLIANCE. (a) The corporation
194190 shall:
195191 (1) establish appropriate security standards to
196192 protect both the transmission and the receipt of individually
197193 identifiable health information or health care data;
198194 (2) establish appropriate security standards to
199195 protect access to any individually identifiable health information
200196 or health care data collected, assembled, or maintained by the
201197 corporation;
202198 (3) establish the highest levels of security and
203199 protection for access to and control of individually identifiable
204200 health information, including mental health care data and data
205201 relating to specific disease status, that is governed by more
206202 stringent state or federal privacy laws; and
207203 (4) establish policies and procedures for the
208204 corporation for taking disciplinary actions against a board member,
209205 employee, or other person with access to individually identifiable
210206 health care information that violates state or federal privacy laws
211207 related to health care information or data maintained by the
212208 corporation.
213209 (b) This section expires September 1, 2021.
214210 SECTION 12. Section 182.105, Health and Safety Code, is
215211 amended to read as follows:
216212 Sec. 182.105. INTELLECTUAL PROPERTY. (a) The corporation
217213 shall take commercially reasonable measures to protect its
218214 intellectual property, including obtaining patents, trademarks,
219215 and copyrights where appropriate.
220216 (b) This section expires September 1, 2021.
221217 SECTION 13. Section 182.106, Health and Safety Code, is
222218 amended to read as follows:
223219 Sec. 182.106. ANNUAL REPORT. (a) The corporation shall
224220 submit an annual report to the governor, the lieutenant governor,
225221 the speaker of the house of representatives, and the appropriate
226- oversight committee in the senate and the house of
227- representatives. The annual report must include financial
228- information and a progress update on the corporation's efforts to
229- carry out its mission.
222+ oversight committee in the senate and the house of representatives.
223+ The annual report must include financial information and a progress
224+ update on the corporation's efforts to carry out its mission.
230225 (b) This section expires September 1, 2021.
231226 SECTION 14. Section 182.107, Health and Safety Code, is
232227 amended by adding Subsection (d) to read as follows:
233228 (d) This section expires September 1, 2021.
234229 SECTION 15. (a) Section 182.108, Health and Safety Code, is
235230 amended by adding Subsection (f) to read as follows:
236231 (f) Subsections (a)-(e) and this subsection expire
237232 September 1, 2021.
238233 (b) Effective September 1, 2021, Section 182.108, Health
239234 and Safety Code, is amended by adding Subsections (g), (h), (i),
240235 (j), (k), (l), (m), and (n) to read as follows:
241236 (g) The privacy and security standards for the electronic
242237 sharing of protected health information adopted under this section
243238 and in effect on September 1, 2021, continue until amended by rule
244239 by the commission.
245240 (h) In amending standards under Subsection (g), the
246241 commission shall seek the assistance of a private nonprofit
247242 organization with relevant knowledge and experience in
248243 establishing statewide health information exchange capabilities.
249244 (i) Standards amended under Subsection (g) must be designed
250245 to:
251246 (1) comply with the Health Insurance Portability and
252247 Accountability Act and Privacy Standards and Chapter 181;
253248 (2) comply with any other state and federal law
254249 relating to the security and confidentiality of information
255250 electronically maintained or disclosed by a covered entity;
256251 (3) ensure the secure maintenance and disclosure of
257252 individually identifiable health information;
258253 (4) include strategies and procedures for disclosing
259254 individually identifiable health information; and
260255 (5) support a level of system interoperability with
261256 existing health record databases in this state that is consistent
262257 with emerging standards.
263258 (j) The commission shall designate a private nonprofit
264259 organization with relevant knowledge and experience in
265260 establishing statewide health information exchange capabilities to
266261 establish a process by which a covered entity may apply for
267262 certification by the designated private nonprofit organization of a
268263 covered entity's past compliance with standards adopted under this
269264 section. If a private nonprofit organization with relevant
270265 knowledge and experience in establishing statewide health
271266 information exchange capabilities does not exist, the commission
272267 shall either:
273268 (1) establish the process described by this
274269 subsection; or
275270 (2) designate another entity with relevant knowledge
276271 to establish the process described by this subsection.
277272 (k) The entity that establishes the process under
278273 Subsection (j) shall publish the standards adopted under this
279274 section on the entity's Internet website.
280275 (l) The commission shall ensure that any fee charged for the
281276 certification process described in Subsection (j) by the private
282277 nonprofit organization or entity designated under that subsection,
283278 including a person acting on behalf of a designated organization or
284- entity, is reasonable. If the commission establishes the process as
285- described by Subsection (j)(1), the commission shall set a
279+ entity, is reasonable. If the commission establishes the process
280+ as described by Subsection (j)(1), the commission shall set a
286281 reasonable fee for the certification process.
287282 (m) For good cause, the commission may revoke the
288283 designation or authority of a private nonprofit organization or
289284 entity to establish the process or offer certifications under
290285 Subsection (j).
291286 (n) In this section:
292287 (1) "Covered entity" has the meaning assigned by
293288 Section 181.001.
294289 (2) "Disclose" has the meaning assigned by Section
295290 181.001.
296291 (3) "Health Insurance Portability and Accountability
297292 Act and Privacy Standards" has the meaning assigned by Section
298293 181.001.
299294 (4) "Individually identifiable health information"
300295 means individually identifiable health information as that term is
301296 defined by the privacy rule of the Health Insurance Portability and
302297 Accountability Act and Privacy Standards.
303298 (5) "Protected health information" means protected
304299 health information as that term is defined by the privacy rule of
305300 the Health Insurance Portability and Accountability Act and Privacy
306301 Standards.
307302 SECTION 16. Except as otherwise provided by this Act, this
308303 Act takes effect September 1, 2015.
304+ ______________________________ ______________________________
305+ President of the Senate Speaker of the House
306+ I hereby certify that S.B. No. 203 passed the Senate on
307+ April 9, 2015, by the following vote: Yeas 31, Nays 0; and that
308+ the Senate concurred in House amendment on May 4, 2015, by the
309+ following vote: Yeas 31, Nays 0.
310+ ______________________________
311+ Secretary of the Senate
312+ I hereby certify that S.B. No. 203 passed the House, with
313+ amendment, on April 20, 2015, by the following vote: Yeas 144,
314+ Nays 1, one present not voting.
315+ ______________________________
316+ Chief Clerk of the House
317+ Approved:
318+ ______________________________
319+ Date
320+ ______________________________
321+ Governor