House advances health data authority with new privacy opt-out and legislative membership

The Utah House unanimously adopted and passed second substitute HB 41 on Feb. 9, updating the Health Data Committee
nd adding new privacy protections and governance changes.

Representative Lesser, presenting the substitute, said the original law created a committee to analyze de-identified health-care data but was enacted more than 30 years ago. "The reports that are created under the direction of this health data committee provide vitally important information," he said, and the substitution adds legislative members and specialists in data privacy to the committee.

Representative Lisonbee, who moved the second substitute, said the revised bill provides privacy protections by requiring a prominent opt-out on the Department of Health and Human Services website, prohibits sharing Social Security numbers collected with the data, requires a review of authorizations over 10 years old and adds a two-year sunset for reassessment.

Representative Thurston, who supported the substitution, said the change brings statutory authority and oversight in line with current state and federal requirements. The House adopted the substitute and passed HB 41 70–0; the bill will be transmitted to the Senate for further consideration.

The next step: HB 41 is sent to the Senate; committees and agencies will follow statutory direction for the new review and opt-out procedures if the bill is enacted.