CSSB 133(HSS): "An Act creating a statewide electronic health information exchange system; and providing for an effective date."

00 CS FOR SENATE BILL NO. 133(HSS) 01 "An Act creating a statewide electronic health information exchange system; and 02 providing for an effective date." 03 BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF ALASKA: 04 * Section 1. The uncodified law of the State of Alaska is amended by adding a new section 05 to read: 06 LEGISLATIVE INTENT. It is the intent of the legislature to create a secure electronic 07 health information exchange system that 08 (1) ensures that the confidentiality of individually indentifying health 09 information of a patient is secure and protected; 10 (2) improves health care quality, reduces medical errors, increases the 11 efficiency of care, and advances the delivery of appropriate, evidence-based health care 12 services; 13 (3) promotes wellness, disease prevention, and management of chronic 14 illnesses by increasing the availability and transparency of information related to the health

01 care needs of an individual for the benefit of the individual; 02 (4) ensures that appropriate information needed to make medical decisions is 03 available in a usable form at the time and in the location that the medical service is provided; 04 (5) produces greater value for health care expenditures by reducing health care 05 costs that result from inefficiency, medical errors, inappropriate care, and incomplete 06 information; 07 (6) promotes a more effective marketplace, greater competition, greater 08 systems analysis, increased choice, enhanced quality, and improved outcomes in health care 09 services; and 10 (7) improves the coordination of information and the provision of health care 11 services through an effective infrastructure for the secure and authorized exchange and use of 12 health care information. 13 * Sec. 2. AS 18.23 is amended by adding new sections to read: 14 Article 4. Electronic Health Information Exchange System. 15 Sec. 18.23.300. Creation of health information exchange system. (a) The 16 department shall establish and implement a statewide electronic health information 17 exchange system and ensure the interoperability and compliance of the system with 18 state and federal specifications and protocols for exchanging health records and data. 19 (b) The system established under this section must 20 (1) include infrastructure planning that involves 21 (A) the designation by the commissioner of a qualified entity or 22 combination of qualified entities in the state that 23 (i) has an advisory or governing body made up of health 24 system stakeholders that include members identified under (d) of this 25 section; 26 (ii) applies for available federal and state funding for 27 planning and implementation of the system authorized by the 28 commissioner; 29 (iii) submits an annual budget for approval of the 30 commissioner; 31 (iv) complies with nondiscrimination and conflict of

01 interest policies; 02 (v) meets and complies with federal and state health 03 information policies and standards; 04 (vi) provides cost and cost saving data associated with 05 the development and use of the system to the department; 06 (B) the development of statewide infrastructure to support the 07 electronic health information exchange system established under this section 08 and to connect electronic health records to the infrastructure; 09 (C) the development of a statewide technology plan, with the 10 participation of identified stakeholders, to promote the implementation and 11 sustained use by public and private health care payors and providers of 12 electronic health records and the system established under this section in order 13 to ensure interoperability among government-operated health information 14 systems and other public and private health information and reporting systems; 15 (D) the development of policies and standards, consistent with 16 federal and state law, to safeguard the privacy and security of health 17 information; 18 (E) the development of a training and workforce development 19 plan for implementing and serving the system; 20 (F) an estimate of costs of the hardware, software, services, and 21 support needed to implement and maintain the technical infrastructure; and 22 (2) include implementation measures that 23 (A) provide for installation and training on the use of the 24 system; 25 (B) set out a plan to encourage health care provider, payor, and 26 patient use of electronic records over a sustained period of time; 27 (C) provide support to providers for workflow redesign, quality 28 improvement, and care management services; 29 (D) provide for participation by all identified stakeholders in 30 the planning and implementation of the system; 31 (E) comply with federal and state health information policies;

01 and 02 (F) provide for periodic evaluation and improvement of the 03 system. 04 (c) The department may enter into contracts, seek and accept available federal 05 and private funds and equipment, and adopt regulations necessary to carry out the 06 purposes of this section. 07 (d) The designee under (b)(1)(A) of this section may be the state or a private 08 for-profit or nonprofit entity or entities under contract with the state or a combination 09 of the state and one or more entities under contract with the state. The advisory or 10 governing body of the designee must include 11 (1) the commissioner; and 12 (2) eight other individuals, each of whom represents one of the 13 following interests: 14 (A) hospitals and nursing home facilities; 15 (B) private medical care providers; 16 (C) community-based primary care providers; 17 (D) federal health care providers; 18 (E) Alaska tribal health organizations; 19 (F) health insurers; 20 (G) health care consumers; 21 (H) employers or businesses. 22 Sec. 18.23.305. Department; duties. In carrying out its duties under 23 AS 18.23.300, the department shall 24 (1) in accordance with federal recommendations, determine the 25 manner in which the system is developed and operated; 26 (2) provide oversight and technical assistance needed for planning and 27 implementing the system; 28 (3) authorize and facilitate applications for available federal funding 29 for planning and implementing the system; 30 (4) ensure compliance with applicable federal and state health 31 information policies and standards;

01 (5) ensure compliance with federal and state law and standards that 02 safeguard the privacy and security of health information. 03 Sec. 18.23.310. Confidentiality and security of information. (a) The 04 department shall establish appropriate security standards to protect the transmission 05 and receipt of individually identifiable information contained in the system established 06 under AS 18.23.300. The standards must 07 (1) include controls over access to and collection, organization, and 08 maintenance of records and data that protect the confidentiality of the individual who 09 is the subject of a health record; 10 (2) include a secure and traceable electronic audit system for 11 identifying access points and trails; 12 (3) meet the most stringent applicable federal or state privacy law 13 governing the protection of the information contained in the system. 14 (b) A person may not release or publish individually indentifying health 15 information from the system for purposes unrelated to the treatment or billing of the 16 patient who is the subject of the information. Use or distribution of the information for 17 a marketing purpose is strictly prohibited. 18 (c) The department shall establish procedures for a patient who is the subject 19 of a health record contained in the system to 20 (1) opt out of the system; 21 (2) consent to the distribution of the patient's records contained in the 22 system; 23 (3) be notified of a violation of the confidentiality provisions required 24 under this section; 25 (4) on request to the department, view an audit report created under 26 this section for the purpose of monitoring access to the patient's records. 27 Sec. 18.23.315. Health information exchange system report to the 28 legislature. The department shall provide to the legislature, on or before December 31 29 of each year, an annual report on the progress of the health information exchange 30 system in the state, including a specific set of recommendations for long-term 31 participation and financial support by the state.

01 Sec. 18.23.320. Contract conditions. A contract entered into to carry out the 02 purposes of AS 18.23.300 must require that the contractor meet applicable federal and 03 state requirements for protecting health information privacy and security and 04 nationally recognized standards for interoperability of health information technology. 05 Sec. 18.23.325. Definitions. In AS 18.23.300 - 18.23.325, 06 (1) "commissioner" means the commissioner of health and social 07 services; 08 (2) "department" means the Department of Health and Social Services; 09 (3) "system" means the statewide electronic health information 10 exchange system established under AS 18.23.300. 11 * Sec. 3. This Act takes effect July 1, 2009.