New Hampshire bill would limit sharing of identifiable health information

The bill would bar covered organizations from sharing identifiable health information with the federal government or other third parties. The rule covers state agencies, local governments, their contractors, vendors, and grant recipients. It applies to identifiable medical, disability, and mental health information. Sharing would be allowed with informed written consent, when expressly required by law, regulation, or court order, or when needed to provide or coordinate care, services, supports, or benefits. If passed, the act would take effect 60 days after passage.

When disclosure is required by law, agencies would share only the minimum data needed; contractors, vendors, and grant recipients would have to follow the same standards. These standards apply to the agencies, contractors, vendors, and grant recipients covered by the proposed rules. Agencies would use information without personal identifiers whenever practicable. If passed, the act would take effect 60 days after passage.

The attorney general would be able to enforce the proposed rules. The authority would apply to violations of the proposed health data privacy rules. Violations may lead to civil penalties or corrective action under state law. If passed, the act would take effect 60 days after passage.