Handles health records, in Texas

Tex. Health & Safety Code sec. 181.151 · Read the law's page

• Do not reidentify or attempt to reidentify an individual who is the subject of any protected health information without the individual's consent or authorization if required under chapter 181 or other state or federal law (Tex. Health & Safety Code sec. 181.151).

Tex. Health & Safety Code ch. 181 · Read the law's page

• Train your employees on state and federal law concerning protected health information as necessary for their duties, within 90 days of hire, have each sign a statement verifying completion, and keep the statement until the sixth anniversary of signing (Tex. Health & Safety Code sec. 181.101).
• If you are a health care provider using an electronic health records system capable of fulfilling the request, provide a person's electronic health record in electronic form within 15 business days of a written request, unless the person agrees to accept another form (Tex. Health & Safety Code sec. 181.102(a)).
• Prominently post on your Internet website and at any facility detailed instructions for a consumer to request health care records, contact your disciplinary or licensing authority and file a consumer complaint, unless you only process claims or data for another covered entity (Tex. Health & Safety Code sec. 181.105).
• Do not reidentify or attempt to reidentify an individual who is the subject of protected health information without the individual's consent or authorization if required (Tex. Health & Safety Code sec. 181.151).
• Obtain clear and unambiguous permission in written or electronic form before you use or disclose protected health information for a marketing communication, unless an exception in section 181.152(a) applies, and honor a request to be removed from a mailing list within 45 days (Tex. Health & Safety Code sec. 181.152).
• Do not disclose an individual's protected health information to any other person in exchange for direct or indirect remuneration, except as section 181.153 allows (Tex. Health & Safety Code sec. 181.153).
• Notify an individual whose protected health information is subject to electronic disclosure, and do not electronically disclose it to any person without a separate authorization for each disclosure unless section 181.154(c) applies (Tex. Health & Safety Code sec. 181.154).

Tex. Health & Safety Code sec. 183.006 · Read the law's page

• If you are a covered entity under Texas Health and Safety Code chapter 183, make sure each electronic health record system you use to store the electronic health records of minors lets a minor's parent, or the minor's managing conservator or guardian where applicable, obtain complete and unrestricted access to the minor's electronic health record immediately, unless state or federal law or a court order restricts access to all or part of it (Health and Safety Code Section 183.006(b)).

Tex. Health & Safety Code sec. 183.002 · Read the law's page

• If you are a covered entity under Health and Safety Code chapter 181 or a health care practitioner, ensure that electronic health records under your control that contain patient information are physically maintained in the United States or a territory of the United States, including records held by a third-party or subcontracted computing facility or cloud computing service (Tex. Health & Safety Code sec. 183.002(a)).
• Ensure that the electronic health record information of Texas residents, other than open data, is accessible only to individuals who require it to perform duties within the scope of their employment related to treatment, payment or health care operations (Tex. Health & Safety Code sec. 183.002(b)).
• Implement reasonable and appropriate administrative, physical and technical safeguards to protect the confidentiality, integrity and availability of electronic health record information (Tex. Health & Safety Code sec. 183.002(c)).

Tex. Ins. Code § 4201.156 · Read the law's page

• If you are a utilization review agent, do not use an automated decision system, including one that incorporates an AI system, to make an adverse determination wholly or partly; an algorithm, AI system or automated decision system may still be used for administrative support or fraud detection.
• Include in each notice of an adverse determination a description of and the source of the screening criteria and review procedures used as guidelines in making the adverse determination.