Iowa’s Attorney General is supporting House Study Bill 526 (2018) which adds the following health care information to the state’s data breach statute:
- medical records, physical and mental health
- including treatment & diagnosis
- health insurance information
Any other requirements in House Study Bill 526 (2018) ?
- 45 day notification requirement
- 128-bit data encryption requirement
- Notification to the state if written notification to more than 500 consumers in the state is required by a person’s primary or functional federal regulator (an Equifax fix)
Health IT Security | Proposed Iowa Data Breach Bill Accounts for Health Data