AN ACT Relating to nonpublic personal health information; reenacting and amending RCW 42.56.400; and adding a new section to chapter 48.02 RCW.

BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF WASHINGTON:

NEW SECTION.  Sec. 1.  A new section is added to chapter 48.02 RCW to read as follows:

(1) All nonpublic personal health information obtained by, disclosed to, or in the custody of the commissioner, regardless of the form or medium, is confidential and is not subject to public disclosure under chapter 42.56 RCW. The commissioner shall not disclose nonpublic personal health information except in the furtherance of regulatory or legal action brought as a part of the commissioner's official duties.

(2) The following definitions apply only for the purposes of this section:

(a) "Health information" means any information or data, except age or gender, whether oral or recorded in any form or medium, created by or derived from a health care provider or a patient, or a policyholder or enrollee, that relates to:

(i) The past, present, or future physical, mental, or behavioral health or condition of an individual;

(ii) The provision of health care to an individual; or

(iii) Payment for the provision of health care to an individual.

(b) "Health care" means preventive, diagnostic, therapeutic, rehabilitative, maintenance, or palliative care, services, procedures, tests, or counseling that:

(i) Relates to the physical, mental, or behavioral condition of an individual;

(ii) Affects the structure or function of the human body or any part of the human body, including the banking of blood, sperm, organs, or any other tissue; or

(iii) Prescribes, dispenses, or furnishes to an individual drugs or biologicals, or medical devices or health care equipment and supplies.

(c) "Nonpublic personal health information" means health information:

(i) That identifies an individual who is the subject of the information; or

(ii) With respect to which there is a reasonable basis to believe that the information could be used to identify an individual.

(d) "Patient" means an individual who is receiving, has received, or has sought health care. The term includes a deceased individual who has received health care.

(e) "Policyholder" or "enrollee" means a person who is covered by, enrolled in, has applied for, or purchased, an insurance policy, a health plan as defined in RCW 48.43.005, a group plan, or any other product regulated by the insurance commissioner. "Policyholder" or "enrollee" may include, without limitation, a subscriber, member, annuitant, beneficiary, spouse, or dependent.

(3) The commissioner may:

(a) Share documents, materials, or other information, including the confidential documents, materials, or information subject to subsection (1) of this section, with (i) the national association of insurance commissioners and its affiliates and subsidiaries, and (ii) regulatory and law enforcement officials of this and other states and nations, the federal government, and international authorities, if the recipient agrees to maintain the confidentiality and privileged status of the document, material, or other information;

(b) Receive documents, materials, or information, including otherwise either confidential or privileged documents, materials, or information, from (i) the national association of insurance commissioners and its affiliates and subsidiaries, and (ii) regulatory and law enforcement officials of this and other states and nations, the federal government, and international authorities and must maintain as confidential or privileged any document, material, or information received that is either confidential or privileged, or both, under the laws of the jurisdiction that is the source of the document, material, or information; and

(c) Enter into agreements governing the sharing and use of information consistent with this subsection.

(4) No waiver of an existing claim of confidentiality or privilege in the documents, materials, or information may occur as a result of disclosure to the commissioner under this section or as a result of sharing as authorized in subsection (3) of this section.

(5) The commissioner shall add language in large font to the release consumers use when filing complaints with the office, whether on-line or in writing, informing them that the office may share their personal health information with other entities and for the purposes authorized under subsection (3) of this section, and that the information will only be shared if it is to be held confidential by the other entity. Consumers shall be provided the opportunity to opt out at the time of filing their complaint, indicating that their personal health information may not be shared under subsection (3) of this section.

Sec. 2.  RCW 42.56.400 and 2016 c 142 s 20, 2016 c 142 s 19, and 2016 c 122 s 4 are each reenacted and amended to read as follows:

The following information relating to insurance and financial institutions is exempt from disclosure under this chapter:

(1) Records maintained by the board of industrial insurance appeals that are related to appeals of crime victims' compensation claims filed with the board under RCW 7.68.110;

(2) Information obtained and exempted or withheld from public inspection by the health care authority under RCW 41.05.026, whether retained by the authority, transferred to another state purchased health care program by the authority, or transferred by the authority to a technical review committee created to facilitate the development, acquisition, or implementation of state purchased health care under chapter 41.05 RCW;

(3) The names and individual identification data of either all owners or all insureds, or both, received by the insurance commissioner under chapter 48.102 RCW;

(4) Information provided under RCW 48.30A.045 through 48.30A.060;

(5) Information provided under RCW 48.05.510 through 48.05.535, 48.43.200 through 48.43.225, 48.44.530 through 48.44.555, and 48.46.600 through 48.46.625;

(6) Examination reports and information obtained by the department of financial institutions from banks under RCW 30A.04.075, from savings banks under RCW 32.04.220, from savings and loan associations under RCW 33.04.110, from credit unions under RCW 31.12.565, from check cashers and sellers under RCW 31.45.030(3), and from securities brokers and investment advisers under RCW 21.20.100, all of which is confidential and privileged information;

(7) Information provided to the insurance commissioner under RCW 48.110.040(3);

(8) Documents, materials, or information obtained by the insurance commissioner under RCW 48.02.065, all of which are confidential and privileged;

(9) Documents, materials, or information obtained by the insurance commissioner under RCW 48.31B.015(2) (l) and (m), 48.31B.025, 48.31B.030, and 48.31B.035, all of which are confidential and privileged;

(10) Data filed under RCW 48.140.020, 48.140.030, 48.140.050, and 7.70.140 that, alone or in combination with any other data, may reveal the identity of a claimant, health care provider, health care facility, insuring entity, or self-insurer involved in a particular claim or a collection of claims. For the purposes of this subsection:

(a) "Claimant" has the same meaning as in RCW 48.140.010(2).

(b) "Health care facility" has the same meaning as in RCW 48.140.010(6).

(c) "Health care provider" has the same meaning as in RCW 48.140.010(7).

(d) "Insuring entity" has the same meaning as in RCW 48.140.010(8).

(e) "Self-insurer" has the same meaning as in RCW 48.140.010(11);

(11) Documents, materials, or information obtained by the insurance commissioner under RCW 48.135.060;

(12) Documents, materials, or information obtained by the insurance commissioner under RCW 48.37.060;

(13) Confidential and privileged documents obtained or produced by the insurance commissioner and identified in RCW 48.37.080;

(14) Documents, materials, or information obtained by the insurance commissioner under RCW 48.37.140;

(15) Documents, materials, or information obtained by the insurance commissioner under RCW 48.17.595;

(16) Documents, materials, or information obtained by the insurance commissioner under RCW 48.102.051(1) and 48.102.140 (3) and (7)(a)(ii);

(17) Documents, materials, or information obtained by the insurance commissioner in the commissioner's capacity as receiver under RCW 48.31.025 and 48.99.017, which are records under the jurisdiction and control of the receivership court. The commissioner is not required to search for, log, produce, or otherwise comply with the public records act for any records that the commissioner obtains under chapters 48.31 and 48.99 RCW in the commissioner's capacity as a receiver, except as directed by the receivership court;

(18) Documents, materials, or information obtained by the insurance commissioner under RCW 48.13.151;

(19) Data, information, and documents provided by a carrier pursuant to section 1, chapter 172, Laws of 2010;

(20) Information in a filing of usage-based insurance about the usage-based component of the rate pursuant to RCW 48.19.040(5)(b);

(21) Data, information, and documents, other than those described in RCW 48.02.210(2), that are submitted to the office of the insurance commissioner by an entity providing health care coverage pursuant to RCW 28A.400.275 and 48.02.210;

(22) Data, information, and documents obtained by the insurance commissioner under RCW 48.29.017;

(23) Information not subject to public inspection or public disclosure under RCW 48.43.730(5);

(24) Documents, materials, or information obtained by the insurance commissioner under chapter 48.05A RCW; ((and))

(25) Documents, materials, or information obtained by the insurance commissioner under RCW 48.74.025, 48.74.028, 48.74.100(6), 48.74.110(2) (b) and (c), and 48.74.120 to the extent such documents, materials, or information independently qualify for exemption from disclosure as documents, materials, or information in possession of the commissioner pursuant to a financial conduct examination and exempt from disclosure under RCW 48.02.065; and

(26) Nonpublic personal health information obtained by, disclosed to, or in the custody of the insurance commissioner, as provided in section 1 of this act.

--- END ---