{"id":223,"date":"2015-07-09T21:20:00","date_gmt":"2015-07-09T21:20:00","guid":{"rendered":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/2015\/07\/09\/trend-states-strengthening-health-data-privacy\/"},"modified":"2015-07-09T21:20:00","modified_gmt":"2015-07-09T21:20:00","slug":"trend-states-strengthening-health-data-privacy","status":"publish","type":"post","link":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/trend-states-strengthening-health-data-privacy\/","title":{"rendered":"Trend: States Strengthening Health Data Privacy"},"content":{"rendered":"<p>Connecticut and Oregon both strengthened laws protecting health care data this year. Specifically the states , strengthened protections of\u00a0personally identifiable information (\u201cPII\u201d).<\/p>\n<ul>\n<li>Connecticut did this:\n<ul>\n<li>Effective October 1, 2015,\u00a0<a href=\"http:\/\/www.cga.ct.gov\/2015\/ACT\/PA\/2015PA-00142-R00SB-00949-PA.htm\" style=\"color:rgb(0,83,153);border:0px solid rgb(204,204,204);text-decoration:none;font-family:'Open Sans', Arial, Verdana, Geneva, sans-serif;font-size:15px;line-height:24.270000457763672px;\" target=\"_blank\" rel=\"noopener noreferrer\">S.B. 941<\/a>\u00a0\n<ul>\n<li>Requires notice of a breach of personal information within 90 days of discovery<\/li>\n<li>If a breach involves social security numbers, must offer a year of complimentary identity theft prevention and mitigation services, and the notifications must include information on signing up for these services, as well as information on placing a credit freeze.\u00a0<\/li>\n<li>\u00a0Health insurance companies must\u00a0implement, maintain, and update annually a \u201ccomprehensive information security program\u201d to protect personal information (including\u00a0protected health information, government-issued ID numbers, biometric data, and financial information).<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li>Oregon did this:\n<ul>\n<li>Senate Bill 601 (<a href=\"https:\/\/olis.leg.state.or.us\/liz\/2015R1\/Downloads\/MeasureDocument\/SB601\/Enrolled\" style=\"border:0px solid rgb(204,204,204);text-decoration:none;font-family:'Open Sans', Arial, Verdana, Geneva, sans-serif;font-size:15px;line-height:24.270000457763672px;color:rgb(0,83,153);\">SB 601<\/a>) is\u00a0effective January 1, 2016, and will:\n<ul>\n<li>\u00a0Expand\u00a0the definition of \u201cpersonal information\u201d triggering a required notification to include:\n<ul>\n<li>1) biometrics<\/li>\n<li>2)\u00a0health insurance policy number or subscriber identification number in combination with any other unique identifier that a health insurer uses to identify the individual;\u00a0or<\/li>\n<li>3) any information about a consumer\u2019s medical history or mental or physical condition or about a health care professional\u2019s medical diagnosis or treatment of the individual.<\/li>\n<\/ul>\n<\/li>\n<li>\u00a0The Attorney General must be notified for breaches of personal information involving 250 residents of the state or more &amp; may bring Deceptive Trade Practices Act violations.<\/li>\n<li>The threshold for notification is altered\u00a0\u00a0to an \u201cunlikely to suffer harm\u201d standard in place of the previous standard of \u201cno reasonable likelihood of harm\u201d and requires this determination be made in writing by the effected entity and maintained for at least five years. \u00a0<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><a href=\"http:\/\/www.jdsupra.com\/legalnews\/blog-states-strengthen-laws-addressing-77275\/\">The Beat @ CooleyHealth<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Connecticut and Oregon both strengthened laws protecting health care data this year. Specifically the states , strengthened protections of\u00a0personally identifiable information (\u201cPII\u201d).<\/p>\n<ul>\n<li>Connecticut did this:\n<ul>\n<li>Effective October 1, 2015,\u00a0<a href=\"http:\/\/www.cga.ct.gov\/2015\/ACT\/PA\/2015PA-00142-R00SB-00949-PA.htm\" style=\"color:rgb(0,83,153);border:0px solid rgb(204,204,204);text-decoration:none;font-family:'Open Sans', Arial, Verdana, Geneva, sans-serif;font-size:15px;line-height:24.270000457763672px;\" target=\"_blank\" rel=\"noopener noreferrer\">S.B. 941<\/a>\u00a0\n<ul>\n<li>Requires notice of a breach of personal information within 90 days of discovery<\/li>\n<li>If a breach involves social security numbers, must offer a year of complimentary identity theft prevention and mitigation services, and the notifications must&#8230;<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,3],"tags":[],"class_list":["post-223","post","type-post","status-publish","format-standard","hentry","category-health-care-data","category-legislative-trend","entry"],"_links":{"self":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/223","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/comments?post=223"}],"version-history":[{"count":0,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/223\/revisions"}],"wp:attachment":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/media?parent=223"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/categories?post=223"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/tags?post=223"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}