Texas 2023 - 88th Regular

Texas House Bill HB4589 Compare Versions

OldNewDifferences
11 88R12984 JG-D
22 By: Vasut H.B. No. 4589
33
44
55 A BILL TO BE ENTITLED
66 AN ACT
77 relating to restrictions on the use of digital identification
88 systems for patient health care records.
99 BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
1010 SECTION 1. Subtitle I, Title 2, Health and Safety Code, is
1111 amended by adding Chapter 183 to read as follows:
1212 CHAPTER 183. DIGITAL IDENTIFICATION SYSTEMS FOR HEALTH CARE
1313 RECORDS
1414 Sec. 183.001. DEFINITIONS. In this chapter:
1515 (1) "Covered entity" has the meaning assigned by
1616 Section 181.001.
1717 (2) "Digital identification system" means an
1818 electronic system that uses digital technology throughout the
1919 process of identifying an individual, including:
2020 (A) data capture, validation, storage, and
2121 transfer;
2222 (B) credential management; and
2323 (C) identity verification and authentication.
2424 (3) "Health care provider" means a person who is
2525 licensed, certified, or otherwise authorized to provide or render
2626 health care in this state in the ordinary course of business or
2727 practice of a profession.
2828 Sec. 183.002. CONSENT REQUIREMENT FOR USE OF DIGITAL
2929 IDENTIFICATION SYSTEMS. (a) Unless a covered entity or health care
3030 provider obtains a patient's written informed consent, the entity
3131 or provider may not:
3232 (1) use a digital identification system, including a
3333 system created or operated by this state, to store a patient's
3434 health care records, including genetic or biological information;
3535 or
3636 (2) require the use of a digital identification system
3737 for a patient to access the patient's health care records.
3838 (b) A health care provider may not coerce a patient to
3939 consent to the use of a digital identification system, including by
4040 requiring consent as a condition of receiving health care services
4141 or treatment from the provider.
4242 Sec. 183.003. COMMERCIAL USE PROHIBITED WITHOUT
4343 COMPENSATION. A covered entity or health care provider who obtains
4444 a patient's written informed consent under Section 183.002 may not
4545 use the patient's health care records for commercial gain in any
4646 manner unless the entity or provider provides reasonable
4747 compensation to the patient.
4848 Sec. 183.004. CONFIDENTIALITY. (a) A covered entity or
4949 health care provider who obtains a patient's written informed
5050 consent under Section 183.002 shall ensure the patient's health
5151 care records are kept confidential in accordance with applicable
5252 state and federal law.
5353 (b) A covered entity or health care provider shall ensure
5454 that a patient's health care records do not include identifying
5555 information when the entity or provider shares the records in
5656 accordance with the patient's written informed consent provided
5757 under Section 183.002.
5858 Sec. 183.005. ENFORCEMENT. A violation of this chapter by a
5959 covered entity or health care provider constitutes a violation of
6060 Chapter 181 and the entity or provider is subject to enforcement
6161 actions under Subchapter E of that chapter, including disciplinary
6262 action by the appropriate licensing authority.
6363 Sec. 183.006. RULES. The executive commissioner shall
6464 adopt rules to implement this chapter.
6565 SECTION 2. Chapter 183, Health and Safety Code, as added by
6666 this Act, applies only to the use of a digital identification system
6767 that occurs on or after the effective date of this Act.
6868 SECTION 3. This Act takes effect September 1, 2023.