Bill Text: NY A00328 | 2017-2018 | General Assembly | Amended
Bill Title: Prohibits emergency service providers from selling patient health information without written consent.
Spectrum: Moderate Partisan Bill (Democrat 9-2)
Status: (Engrossed - Dead) 2018-01-16 - REFERRED TO HEALTH [A00328 Detail]
Download: New_York-2017-A00328-Amended.html
STATE OF NEW YORK ________________________________________________________________________ 328--A Cal. No. 43 2017-2018 Regular Sessions IN ASSEMBLY January 5, 2017 ___________ Introduced by M. of A. BRAUNSTEIN, ABINANTI, ZEBROWSKI, COLTON, JAFFEE, STECK, WEPRIN -- Multi-Sponsored by -- M. of A. CROUCH, GRAF, HIKIND, LOPEZ, MONTESANO, O'DONNELL, SIMANOWITZ -- read once and referred to the Committee on Health -- reported and referred to the Committee on Codes -- reported from committee, advanced to a third reading, amended and ordered reprinted, retaining its place on the order of third read- ing AN ACT to amend the public health law, in relation to the protection of private patient information by ambulance services The People of the State of New York, represented in Senate and Assem- bly, do enact as follows: 1 Section 1. The public health law is amended by adding a new section 2 3006-a to read as follows: 3 § 3006-a. Patient privacy. 1. As used in this section: 4 (a) "Individual identifying information" means information identifying 5 or tending to identify a patient. 6 (b) "Marketing" means advertising, detailing, marketing, promotion, or 7 any other activity that is intended to be used to influence business 8 volume, sales or market share or evaluate the effectiveness of marketing 9 practices or marketing personnel, regardless of whether the beneficiary 10 of the marketing is a governmental, for-profit, or not-for-profit enti- 11 ty. 12 2. No ambulance service, advanced life support first response service, 13 or employee, member or agent thereof shall disclose, sell, transfer, 14 exchange, provide or use any individual identifying information to any 15 person or entity for the purpose of marketing. 16 3. Notwithstanding subdivision two of this section, and subject to 17 otherwise applicable law, individual identifying information may be: 18 (a) disclosed, sold, transferred or exchanged to: 19 (i) the patient who is the subject of the information, or a person 20 authorized to make health care decisions for the patient; EXPLANATION--Matter in italics (underscored) is new; matter in brackets [] is old law to be omitted. LBD01759-06-7A. 328--A 2 1 (ii) a health care provider providing care or treatment to the 2 patient, for the purpose of such care or treatment; or a health informa- 3 tion system subject to regulations of the department, for the purpose of 4 such care or treatment; 5 (iii) an officer, inspector or investigator for a government health, 6 licensing or law enforcement agency acting under appropriate legal 7 authority; 8 (iv) a person authorized by a court order or a subpoena to receive 9 such information; 10 (v) the patient's health plan, insurer, or third party payer, or an 11 agent thereof, for the purpose of payment or reimbursement for health 12 care services, including determining compliance with the terms of cover- 13 age or medical necessity, or utilization review; 14 (vi) a person or entity to whom, and for a purpose for which, disclo- 15 sure or transfer is otherwise explicitly authorized or required by law; 16 (vii) a person or entity, for the purpose of conducting quality assur- 17 ance or evaluating the performance of an ambulance service, advanced 18 life support first response service, or any employee, member or agent 19 thereof; 20 (viii) a person or entity acting as an employee or agent of a person 21 or entity under any preceding paragraph of this subdivision, for the 22 purpose of and consistent with that paragraph; or 23 (ix) a government entity as provided by law; and 24 (b) used by such ambulance service, advanced life support first 25 responder service, or employee, member or agent thereof, for training, 26 promotion, staff recognition or recruitment purposes, consistent with 27 applicable law, provided the patient or a qualified person as defined by 28 paragraph (G) of subdivision one of section eighteen of this chapter has 29 provided consent to such use in a separate, stand-alone document. Such 30 consent shall be limited to the particular type or types of use and 31 specific transaction or transactions for which such consent is given. 32 4. Nothing in this section shall prohibit the collection, use, trans- 33 fer, or sale of patient data by zip code, geographic region, or medical 34 specialty for marketing purposes, providing it does not contain individ- 35 ual identifying information. 36 5. This section shall not prevent a person from disclosing, selling, 37 transferring, or exchanging for value his or her own individual identi- 38 fying information, for any purpose; provided that the information does 39 not include individual identifying information pertaining to any other 40 person. 41 6. This section does not prohibit a not-for-profit or governmental 42 ambulance service or advanced life support first response service, or 43 agent thereof, from using a patient's name and address in order to 44 contact such patient or a family member at such address with requests 45 for donations to such service; providing that such use shall not include 46 disclosing any individual identifying information. 47 7. No person or entity to whom or which individual identifying infor- 48 mation is disclosed, sold, transferred or exchanged shall disclose, 49 sell, transfer or exchange it to any person or entity other than for the 50 lawful purpose for which it was disclosed, sold, transferred or 51 exchanged to the person or entity, and without satisfactory assurance 52 that the recipient will safeguard the records from being disclosed or 53 used for marketing purposes. 54 8. This section does not authorize any disclosure, sale, transfer, or 55 exchange of individual identifying information that is not otherwise 56 authorized or required by law.A. 328--A 3 1 9. In addition to the commissioner's authority to enforce this section 2 under section three thousand twelve of this article, the attorney gener- 3 al shall have the authority to bring an action to enforce compliance 4 with this section without referral by the commissioner. 5 § 2. This act shall take effect on the one hundred eightieth day after 6 it shall have become a law; provided that, effective immediately, the 7 commissioner of health may make regulations and take other actions 8 reasonably necessary to implement this act on such date.