Protection of pregnant individuals’ information, authorization for disclosure, data breach, and providing a penalty

What it would have done

Summary by the Legislative Reference Bureau, the Legislature's nonpartisan drafting office. It's their wording, not ours.

This bill prohibits an unregulated pregnancy center from disclosing nonpublic personal health information about an individual unless an authorization is obtained from the individual whose nonpublic personal health information is sought to be disclosed. Under the bill, an “unregulated pregnancy center” is a pregnancy services center that does not directly provide abortions or emergency contraception to clients or provide referrals to clients for abortions or emergency contraception. The bill provides that a “pregnancy services center” is a facility, including a mobile facility, the primary purpose of which is to provide services to individuals who are or may be pregnant and that offers obstetric ultrasounds, obstetric sonograms, pregnancy testing or diagnosis, or prenatal care to pregnant individuals or has the appearance of a medical facility.

Under the bill, a valid authorization to disclose nonpublic personal health information must be in written or electronic form and must contain the identity and signature of the individual who is the subject of the nonpublic personal health information. The authorization must also contain a general description of the types of nonpublic personal health information to be disclosed, a general description of the parties to whom the center discloses the information, the purpose of the disclosure and how the information will be used, as well as notice of the length of time for which the authorization is valid, notice that the individual may revoke the authorization at any time, and the procedure for making a revocation. The bill also provides that before an unregulated pregnancy center may obtain an authorization, it must, as part of its explanation of the authorization form, provide a verbal disclosure to the individual that it is not a covered entity for purposes of the federal privacy regulations promulgated under the federal Health Insurance Portability and Accountability Act (HIPAA).

Who's behind it

5 senators are its authors⁠. All 5 are Democrats.

14 more lawmakers signed on in support⁠.