Relating to health-related data including hospital data and certain information included in reportable disease reports

This bill relates to health-related data protections. The bill provides that the auditor of state shall not have access to an individual’s name or residential address from a reportable disease report. The bill includes provisions related to health data collected and used by the department of public health (DPH). Current law directs DPH to enter into a memorandum of understanding with a contractor selected through a request for proposals process to collect, maintain, and disseminate hospital inpatient, outpatient, and ambulatory data. Current law also provides that unless otherwise authorized by state or federal law, the data collected shall not include the social security number of the individual subject of the data. Under the bill, data prohibited from collection would also include the name of the individual subject of the data. The bill also prohibits a state or local agency employee or agent from having access to personally identifiable information included in a reportable disease report provided to or maintained by the department of public health, a local board of health, or a local public health department, unless the employee or agent has completed data confidentiality training.