Duty LXD-6858
Handles health records, in Utah
Each law's tag says when it binds: since in force from , in 7 weeks not yet in force
Utah Health Data Authority, identifiable health data and re-identificationsince 4 lines
Utah Health Data Authority, Utah Code 26B-8-507 to 26B-8-509 · Read the law's page
- Do not attempt to identify or re-identify an individual using data obtained under the Utah Health Data Authority part, including through data linking or correlation, except as sections 26B-8-506 and 26B-8-508 allow (Utah Code 26B-8-507(1)(c)).
- If you are the department, use, release or publish information received under the Utah Health Data Authority part only in a way that identifies no person, except as sections 26B-8-506 and 26B-8-508 provide (Utah Code 26B-8-507(1)(b)).
- To obtain identifiable health data from the department, make the request for a specified period or solely for bona fide research or statistical purposes, demonstrate that the data is required for those purposes, and enter into a written agreement satisfactory to the department to protect the data (Utah Code 26B-8-508(4)).
- Once you hold identifiable health data under section 26B-8-508, do not disclose it further without the department's prior approval, and then only by control number, and delete it at the earlier of the end of the specified period or the day your need for it ceases (Utah Code 26B-8-508(5)).
Patient access to medical records and third-party records requestsin force5 lines
Utah Code 78B-5-618 · Read the law's page
- If you are a health care provider governed by the federal health privacy standards, let a patient or the patient's personal representative inspect or receive a copy of the patient's records (Utah Code 78B-5-618(2)).
- If you are a health care provider not governed by those standards, let a patient or the patient's personal representative inspect or receive a copy of the patient's records unless access is restricted by law or judicial order (Utah Code 78B-5-618(3)).
- Provide a copy to the patient or the patient's personal representative within the deadlines of 45 C.F.R. 164.524(b), charging only a reasonable cost-based fee for copying and postage (Utah Code 78B-5-618(4)).
- Provide a copy to a patient's attorney, legal representative or other authorized third party within 30 days after receipt of notice, charging no more than the rates the section sets, waiving 50% of the fee if the records are not sent within 30 days and the whole fee if not within 60 days (Utah Code 78B-5-618(5)).
- Fulfill a separate request for payment and balance information within 30 days, or pay the penalties Subsection (6)(c) sets (Utah Code 78B-5-618(6)).
Health Insurance Preauthorization AI Disclosure (SB 319, 2026 General Session)from , in 7 weeks4 lines
Utah Code 31A-22-650, as amended · Read the law's page
- Disclose to the Insurance Department, to each network health care provider, and to each enrollee whether you use artificial intelligence in reviewing a preauthorization request, if you are a health insurerwhen it serves a financial business
- Post that disclosure and your preauthorization statistics on your websitewhen it serves a financial business
- Base an adverse preauthorization determination on clinical or medical necessity on independent medical judgment, not solely on a recommendation from any other sourcewhen it serves a financial business
- Set an authorization validity period of at least 12 months for a drug, device, or covered service treating a chronic or long-term care condition, and at least six months for an outpatient covered servicewhen it serves a financial business
- This duty takes effect , so it is a duty to prepare for rather than one owed today