Handles health records, in Alabama

Alabama Hospital Discharge Data Act, Ala. Code secs. 22-21-413 to 22-21-415 (Act 2021-129) · Read the law's page

• If you are the Alabama Hospital Association or the Alabama Department of Public Health, do not make available to the public any hospital discharge data or other information that reasonably could be expected to reveal the identity of any patient (section 22-21-413(c)).
• If you are the Alabama Department of Public Health, treat reported hospital discharge data as confidential and do not make it available to the public until you have processed and verified that it satisfies the requirements for public disclosure under the Act and applicable federal law (section 22-21-413(c)).
• If you are the Alabama Department of Public Health, adopt rules on the processed and verified discharge data made available to the public and on the release of limited data sets, and make the rules compliant with HIPAA (section 22-21-413(d)).
• If you are the Alabama Department of Public Health, do not include in a report or study you prepare and release from discharge data any information obtained from the data in a form which could be used to identify any patient (section 22-21-414).
• If you are the Alabama Department of Public Health, publish a study or information based on discharge data only if it does not include information in a form which could be used to identify any patient or violate HIPAA (section 22-21-415).

Ala. SB 63, 2026 Regular Session · Read the law's page

• If you are a health benefit plan provider using artificial intelligence to make medical-necessity determinations on prior-authorization requests, base each determination on the enrollee's own medical history, the clinical circumstances the treating provider presents, and other clinical information in the enrollee's record, not a group dataset.when it serves a financial business
• Certify annually to the Alabama Department of Insurance that the artificial intelligence does not rely on a group dataset, is applied fairly and equitably consistent with applicable federal guidance, and does not discriminate against any subscriber group or enrollee.when it serves a financial business
• Have a licensed physician or other health care professional competent to evaluate the artificial intelligence's recommendation make the final determination to deny, delay, or modify a prior-authorization request based on medical necessity.when it serves a financial business
• Make prominent written disclosure of your use of artificial intelligence in utilization review in your policies and procedures, review its outcomes periodically for accuracy, and keep patient data used in that review within its stated purpose under HIPAA.when it serves a financial business

Ala. Code secs. 22-11A-22 and 22-11A-38 · Read the law's page

• Keep confidential all information, reports and medical records concerning persons infected with a sexually transmitted disease designated by the State Board of Health, and do not make them available for public inspection.
• Release an individual's medical record only on the written consent of the patient.
• Except as section 22-11A-38 provides, keep confidential any information required under its article.
• If you receive a notification of a person's contagious condition under section 22-11A-38, hold the information in the strictest confidence and privilege and take only the actions necessary to protect health where there is a foreseeable, real or probable risk of transmission of the disease.

Alabama Mental Health Consumers' Rights Act, Ala. Code sec. 22-56-4(b)(6) and (7) · Read the law's page

• As a provider of inpatient, residential or outpatient mental health services, keep confidential all information in a consumer's mental health, medical and financial records.
• Give a consumer access, on request, to all information in the consumer's mental health, medical and financial records, unless professional staff have made a clinical determination that access would be detrimental to the consumer's health.