Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Health Information Exchange topic
No spam. Unsubscribe anytime.
Providers and privacy advocates press for changes to Connecticut's health information exchange consent model
Summary
Providers, the Office of Health Strategy and privacy groups clashed Monday over the statewide Health Information Exchange (Connie), debating opt‑in/opt‑out rules, the handling of behavioral‑health and SUD records, and provider costs and liability.
Connecticut’s statewide Health Information Exchange — known as Connie — drew sustained scrutiny during a Public Health Committee hearing as provider groups and state officials debated whether the exchange’s opt‑in/opt‑out model protects patient privacy while leaving clinicians the information they need.
Sumit Sajnani, Connecticut’s state health information technology officer (Office of Health Strategy), told the committee that Connie was designed and implemented after multi‑year public working groups and that the system currently operates on an opt‑in consent policy by default for full medical records. He described an extensive stakeholder process dating back to 2010 and to a 2024 statute requiring additional public subgroup review. He said the HIE is connected to roughly 3,000 provider locations and that the opt‑in design aligns with established national practice.
Provider groups, dental associations and the Connecticut Nurses Association urged changes. They warned of gaps in patient and provider protections and of practical problems: the timeline between a patient’s choosing to opt out and a provider’s records being excluded from the HIE; costs and contract burdens on small providers; and special handling for sensitive records such as behavioral‑health and substance‑use‑disorder (SUD) data. Several witnesses asked that the committee require clearer, enforceable waivers or carve‑outs for specific categories of sensitive information and for provider protections against liability if commingled records land in the exchange.
Key exchanges: - Consent timing: Multiple witnesses suggested that patient decisions to opt out may not be fully reflected during a short technical window following a data sweep; some practitioners said they believed records could be included up to several days after an opt‑out. OHS staff disputed a literal “5‑day” gap but agreed that the operational mechanics of consent and of data ingest were technical and needed a clear explanation. OHS provided written materials documenting prior committee and public work and urged stakeholders to review earlier recommendations from a public working group. - Sensitive data: Providers urged that behavioral‑health and SUD records be handled with separate affirmative consent rules. OHS noted federal restrictions on SUD data (42 CFR Part 2) and said SUD handling is already treated distinctively; providers asked for clearer patient‑facing language and for mechanisms where patients can opt in or out by category. - Provider burden: Private‑practice dentists, nonprofit clinics and community providers flagged startup, participation and ongoing administrative costs as barriers to joining Connie; they pressed OHS to analyze financial impacts and propose mitigations.
What the witnesses asked for: A number of provider organizations submitted a joint set of concrete technical and policy proposals (dated Nov. 18 and Dec. 30), and asked the committee to incorporate them into the bill language or to require OHS to implement them. The recommendations call for: (1) clearer patient disclosure and education; (2) HIPAA‑compliant provider contracts and waivers; (3) a shorter or clarified technical window between opt‑out action and data‑ingest exclusion; (4) clearer treatment of gender‑affirming care and other sensitive records; and (5) an assessment of provider cost burdens and possible state supports.
DPH/OHS position: OHS staff told legislators that the HIE was built after a multi‑year public process and that many of the recommendations raised by stakeholders had been considered; OHS urged the committee to review documentation from the 2024 working subgroup and the annual Health IT reports that preceded Connie’s operational launch in 2021.
Next steps: Several witnesses asked the committee to amend the bill to incorporate the provider recommendations and to require OHS to publish a technical description of the opt‑out timing, the data ingestion workflow, and a cost analysis for affected providers. Committee members signaled interest in a follow‑up with OHS and with providers to reconcile technical and privacy questions.
Ending: The committee held the item for follow‑up with OHS; stakeholders said they would continue to press for specific technical fixes and clearer patient disclosures.
