Texas 2023 - 88th Regular

Texas House Bill HB3468 Compare Versions

OldNewDifferences
11 88R24933 LRM-F
22 By: Capriglione, Hull, et al. H.B. No. 3468
33 Substitute the following for H.B. No. 3468:
44 By: Klick C.S.H.B. No. 3468
55
66
77 A BILL TO BE ENTITLED
88 AN ACT
99 relating to a patient's access to health records; authorizing a
1010 civil penalty; authorizing fees.
1111 BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
1212 SECTION 1. Section 15.05, Business & Commerce Code, is
1313 amended by adding Subsection (a-1) to read as follows:
1414 (a-1) It is unlawful for a person to place a restraint on
1515 trade or commerce by intentionally violating federal laws
1616 regulating information blocking, as that term is defined by 45
1717 C.F.R. Section 171.103.
1818 SECTION 2. Section 181.001(b), Health and Safety Code, is
1919 amended by adding Subdivision (3-a) to read as follows:
2020 (3-a) "Information blocking" has the meaning assigned
2121 by 45 C.F.R. Section 171.103.
2222 SECTION 3. Section 181.004(a), Health and Safety Code, is
2323 amended to read as follows:
2424 (a) A covered entity, as that term is defined by 45 C.F.R.
2525 Section 160.103, shall comply with:
2626 (1) the Health Insurance Portability and
2727 Accountability Act and Privacy Standards; and
2828 (2) federal laws regulating information blocking.
2929 SECTION 4. Section 181.102, Health and Safety Code, is
3030 amended to read as follows:
3131 Sec. 181.102. CONSUMER ACCESS TO [ELECTRONIC] HEALTH
3232 RECORDS. (a) The health information of a patient contained in the
3333 patient's physical or electronic health records is considered the
3434 patient's property and, subject to the payment of fees required
3535 under this section, a patient or the patient's legally authorized
3636 representative on request is entitled to copies of those health
3737 records.
3838 (b) Except as provided by Subsection (d) [(b)], if a health
3939 care provider is using an electronic health records system that is
4040 capable of fulfilling the request, the health care provider, as
4141 soon as practicable but not later than the 15th business day after
4242 the date the health care provider receives a written request from a
4343 person for the person's electronic health record, shall provide the
4444 requested record to the person in electronic form unless the person
4545 agrees to accept the record in another form.
4646 (c) Except as provided by Subsection (d), a health care
4747 provider's violation of federal laws regulating information
4848 blocking constitutes a violation of this section.
4949 (d) [(b)] A health care provider is not required to provide
5050 access to a person's protected health information that is excepted
5151 from access, or to which access may be denied, under 45 C.F.R.
5252 Section 164.524.
5353 (e) [(c)] For purposes of this section [Subsection (a)],
5454 the executive commissioner, in consultation with the department,
5555 the Texas Medical Board, and the Texas Department of Insurance, by
5656 rule may recommend a standard electronic format for the release of
5757 requested health records. The standard electronic format
5858 recommended under this section must be consistent, if feasible,
5959 with federal law regarding the release of electronic health
6060 records.
6161 (f) A covered entity that receives a request from a patient
6262 or the patient's legally authorized representative for a copy of
6363 the patient's health records may charge a fee to produce those
6464 records in an amount consistent with the requirements under 45
6565 C.F.R. Section 164.524, except that a covered entity may not charge
6666 an aggregate amount that exceeds $100 to produce the records if:
6767 (1) the patient is a Medicaid recipient; or
6868 (2) the patient's household income is at or below 200
6969 percent of the federal poverty level.
7070 (g) A covered entity shall post in a conspicuous location
7171 for patients requesting health records notice of the option to
7272 obtain a copy of the patient's health records under Subsection (f).
7373 (h) A covered entity may require a patient or the patient's
7474 legally authorized representative to submit a written or electronic
7575 request for copies of the patient's health records but may not
7676 require a patient or the patient's legally authorized
7777 representative to submit a request by facsimile.
7878 (i) Unless explicitly authorized by state or federal law, a
7979 covered entity may not enter into a contract with a person that
8080 includes terms restricting a patient or the patient's legally
8181 authorized representative from accessing the patient's health
8282 records. Any contract clause or provision that restricts a patient
8383 or the patient's legally authorized representative from accessing
8484 the patient's health records is unenforceable.
8585 SECTION 5. Section 181.201, Health and Safety Code, is
8686 amended by amending Subsections (b) and (d) and adding Subsections
8787 (g) and (h) to read as follows:
8888 (b) In addition to the injunctive relief provided by
8989 Subsection (a), the attorney general may institute an action for
9090 civil penalties against a covered entity for a violation of this
9191 chapter, other than a violation of Section 181.102. A civil
9292 penalty assessed under this section may not exceed:
9393 (1) $5,000 for each violation that occurs in one year,
9494 regardless of how long the violation continues during that year,
9595 committed negligently;
9696 (2) $25,000 for each violation that occurs in one
9797 year, regardless of how long the violation continues during that
9898 year, committed knowingly or intentionally; or
9999 (3) $250,000 for each violation in which the covered
100100 entity knowingly or intentionally used protected health
101101 information for financial gain.
102102 (d) In determining the amount of a penalty imposed under
103103 Subsections [Subsection] (b) and (g), the court shall consider:
104104 (1) the seriousness of the violation, including the
105105 nature, circumstances, extent, and gravity of the disclosure or
106106 information blocking;
107107 (2) the covered entity's compliance history;
108108 (3) whether the violation poses a significant risk of
109109 financial, reputational, or other harm to an individual whose
110110 protected health information is involved in the violation;
111111 (4) whether the covered entity was certified at the
112112 time of the violation as described by Section 182.108;
113113 (5) the amount necessary to deter a future violation;
114114 [and]
115115 (6) the covered entity's efforts to correct the
116116 violation;
117117 (7) the size and geographic location of the covered
118118 entity; and
119119 (8) the financial impact the penalty would have on the
120120 covered entity's financial viability and ability to adequately
121121 serve an underserved community or population.
122122 (g) In addition to the injunctive relief provided by
123123 Subsection (a), the attorney general may institute an action for
124124 civil penalties against a covered entity for a violation of Section
125125 181.102. A civil penalty assessed under this subsection may not
126126 exceed:
127127 (1) $10,000 for each negligent violation, regardless
128128 of the length of time the violation continues during any year; or
129129 (2) $250,000 for each intentional violation committed
130130 for the purpose of financial gain, regardless of the length of time
131131 the violation continues during any year.
132132 (h) If the court in a pending action under Subsection (g)
133133 finds the violations occurred with a frequency constituting a
134134 pattern or practice, the court may assess additional civil
135135 penalties for each violation.
136136 SECTION 6. Section 241.154(b), Health and Safety Code, is
137137 amended to read as follows:
138138 (b) Except as provided by Subsection (d), the hospital or
139139 its agent may charge a reasonable fee for providing the health care
140140 information except payment information and is not required to
141141 permit the examination, copying, or release of the information
142142 requested until the fee is paid unless there is a medical
143143 emergency. The fee may not exceed the aggregate amount specified
144144 under Section 181.102(f) and [sum of:
145145 [(1) a basic retrieval or processing fee, which must
146146 include the fee for providing the first 10 pages of the copies and
147147 which may not exceed $30; and
148148 [(A) a charge for each page of:
149149 [(i) $1 for the 11th through the 60th page
150150 of the provided copies;
151151 [(ii) 50 cents for the 61st through the
152152 400th page of the provided copies; and
153153 [(iii) 25 cents for any remaining pages of
154154 the provided copies; and
155155 [(B) the actual cost of mailing, shipping, or
156156 otherwise delivering the provided copies;
157157 [(2) if the requested records are stored on microform,
158158 a retrieval or processing fee, which must include the fee for
159159 providing the first 10 pages of the copies and which may not exceed
160160 $45; and
161161 [(A) $1 per page thereafter; and
162162 [(B) the actual cost of mailing, shipping, or
163163 otherwise delivering the provided copies; or
164164 [(3) if the requested records are provided on a
165165 digital or other electronic medium and the requesting party
166166 requests delivery in a digital or electronic medium, including
167167 electronic mail:
168168 [(A) a retrieval or processing fee, which may not
169169 exceed $75; and
170170 [(B)] the actual cost of mailing, shipping, or
171171 otherwise delivering the provided copies.
172172 SECTION 7. If any provision of this Act or its application
173173 to any person or circumstance is held invalid, the invalidity does
174174 not affect other provisions or applications of this Act which can be
175175 given effect without the invalid provision or application, and to
176176 this end the provisions of this Act are severable.
177177 SECTION 8. The changes in law made by this Act apply only to
178178 a violation of law that occurs on or after the effective date of
179179 this Act. A violation that occurs before the effective date of this
180180 Act is governed by the law in effect on the date the violation
181181 occurred, and the former law is continued in effect for that
182182 purpose. For purposes of this section, a violation of law occurred
183183 before the effective date of this Act if any element of the
184184 violation occurred before that date.
185185 SECTION 9. This Act takes effect September 1, 2023.