Text to be removed highlighted in red.
1 Statement of Purpose.
The general court finds that:
I. The people of New Hampshire value privacy, personal liberty, and limited government intrusion.
II. Individuals with medical conditions, disabilities, or mental health needs are at heightened risk of stigma or discrimination if their personal data is improperly disclosed.
III. State protections should align with and reinforce federal laws, including the Health Insurance Portability and Accountability Act (HIPAA), the Americans with Disabilities Act (ADA), Section 504 of the Rehabilitation Act, and the Genetic Information Nondiscrimination Act (GINA).
IV. It is the policy of the state that Granite Staters shall not have their personally identifiable medical, disability, or mental health information disclosed by state government unless required by law or with their consent.
2 New Subdivision; Health Statistics; Expectation of Privacy in Health Data. Amend RSA 126 by inserting after section 34 the following new subdivision:
Expectation of Privacy in Health Data.
126:35 Privacy Protections.
I. No state agency, political subdivision, contractor, vendor, or grant recipient shall collect, maintain, or disclose personally identifiable medical, disability, or mental health data to the federal government or any third party, unless one or more of the following conditions apply:
(a) The individual, or the individual's parent, guardian, or legal representative, has provided informed written consent;
(b) Disclosure is expressly required by state or federal law, regulation, or court order; or
(c) Disclosure is necessary to provide or coordinate health care, services, supports, or benefits to the individual.
II. When disclosure under paragraph I is required:
(a) Agencies shall disclose only the minimum data necessary to comply with the legal requirement;
(b) De-identified or anonymized data shall be used whenever practicable; and
(c) Contractors, vendors, and grant recipients shall be bound by these same standards.
126:36 Non-Preemption.
Nothing in this subdivision shall be construed to diminish protections provided under federal or state law, including but not limited to:
I. The Health Insurance Portability and Accountability Act (HIPAA);
II. The Americans with Disabilities Act (ADA);
III. Section 504 of the Rehabilitation Act;
IV. The Genetic Information Nondiscrimination Act (GINA);
V. The New Hampshire law against discrimination;
VI. The New Hampshire mental health bill of rights; and
VII. Part 1, article 2-b, New Hampshire state constitution, right to privacy.
126:37 Enforcement.
The attorney general shall have authority to enforce this act. Violations may be subject to civil penalties and corrective action, consistent with state law.
3 Effective Date. This act shall take effect 60 days after its passage.
Text to be added highlighted in green.
1 Statement of Purpose.
The general court finds that:
I. The people of New Hampshire value privacy, personal liberty, and limited government intrusion.
II. Individuals with medical conditions, disabilities, or mental health needs are at heightened risk of stigma or discrimination if their personal data is improperly disclosed.
III. State protections should align with and reinforce federal laws, including the Health Insurance Portability and Accountability Act (HIPAA), the Americans with Disabilities Act (ADA), Section 504 of the Rehabilitation Act, and the Genetic Information Nondiscrimination Act (GINA).
IV. It is the policy of the state that Granite Staters shall not have their personally identifiable medical, disability, or mental health information disclosed by state government unless required by law or with their consent.
2 New Subdivision; Health Statistics; Expectation of Privacy in Health Data. Amend RSA 126 by inserting after section 34 the following new subdivision:
Expectation of Privacy in Health Data.
126:35 Privacy Protections.
I. No state agency, political subdivision, contractor, vendor, or grant recipient shall collect, maintain, or disclose personally identifiable medical, disability, or mental health data to the federal government or any third party, unless one or more of the following conditions apply:
(a) The individual, or the individual's parent, guardian, or legal representative, has provided informed written consent;
(b) Disclosure is expressly required by state or federal law, regulation, or court order; or
(c) Disclosure is necessary to provide or coordinate health care, services, supports, or benefits to the individual.
II. When disclosure under paragraph I is required:
(a) Agencies shall disclose only the minimum data necessary to comply with the legal requirement;
(b) De-identified or anonymized data shall be used whenever practicable; and
(c) Contractors, vendors, and grant recipients shall be bound by these same standards.
126:36 Non-Preemption.
Nothing in this subdivision shall be construed to diminish protections provided under federal or state law, including but not limited to:
I. The Health Insurance Portability and Accountability Act (HIPAA);
II. The Americans with Disabilities Act (ADA);
III. Section 504 of the Rehabilitation Act;
IV. The Genetic Information Nondiscrimination Act (GINA);
V. The New Hampshire law against discrimination;
VI. The New Hampshire mental health bill of rights; and
VII. Part 1, article 2-b, New Hampshire state constitution, right to privacy.
126:37 Enforcement.
The attorney general shall have authority to enforce this act. Violations may be subject to civil penalties and corrective action, consistent with state law.
3 Effective Date. This act shall take effect 60 days after its passage.