House adopts first substitute to strengthen Utah Health Data Authority privacy and operations, passes bill 70-1

The Utah House on Jan. 29 approved first-substitute HB 199, a bill that updates the operational and privacy framework for the Utah Health Data Authority and incorporates recommendations from a recent Office of the Legislative Auditor General (OLAG) performance audit.

Representative Thurston, the bill sponsor, described the Health Data Authority's role in collecting healthcare data used to inform policymakers and cited recent examples where the authority's data helped answer policy questions, such as the impact of water fluoridation. Thurston said the substitute "incorporates everything that we could possibly think of to hold the Department of Health and Human Services accountable for implementing the very best available security and privacy protections."

Floor discussion noted prior review of the bill and collaboration with the chief information security officer and privacy officials. Representative Chevrier said she and colleagues had reviewed the bill closely and were comfortable with the substitute.

Voting on the first substitute was followed by the full bill vote; recorded results on the floor were 70 yes and 1 no. The bill will be sent to the Senate for its consideration.

What the bill does: According to the sponsor, the measure clarifies operational language, requires a well-defined strategic plan covering data collection, management, analysis, dissemination and security, and limits access to sensitive data except in narrowly defined circumstances. The sponsor also said the substitute implements OLAG's recommendations.

Next step: HB 199, as passed by the House, will be transmitted to the Senate for its consideration and any further action there.