SB2294 EnrolledLRB103 26927 KTG 53291 b

1    AN ACT concerning State government.
 
2    Be it enacted by the People of the State of Illinois,
3represented in the General Assembly:
 
4    Section 1. The Freedom of Information Act is amended by
5changing Section 7.5 as follows:
 
6    (5 ILCS 140/7.5)
7    Sec. 7.5. Statutory exemptions. To the extent provided for
8by the statutes referenced below, the following shall be
9exempt from inspection and copying:
10        (a) All information determined to be confidential
11    under Section 4002 of the Technology Advancement and
12    Development Act.
13        (b) Library circulation and order records identifying
14    library users with specific materials under the Library
15    Records Confidentiality Act.
16        (c) Applications, related documents, and medical
17    records received by the Experimental Organ Transplantation
18    Procedures Board and any and all documents or other
19    records prepared by the Experimental Organ Transplantation
20    Procedures Board or its staff relating to applications it
21    has received.
22        (d) Information and records held by the Department of
23    Public Health and its authorized representatives relating

 

 

SB2294 Enrolled- 2 -LRB103 26927 KTG 53291 b

1    to known or suspected cases of sexually transmissible
2    disease or any information the disclosure of which is
3    restricted under the Illinois Sexually Transmissible
4    Disease Control Act.
5        (e) Information the disclosure of which is exempted
6    under Section 30 of the Radon Industry Licensing Act.
7        (f) Firm performance evaluations under Section 55 of
8    the Architectural, Engineering, and Land Surveying
9    Qualifications Based Selection Act.
10        (g) Information the disclosure of which is restricted
11    and exempted under Section 50 of the Illinois Prepaid
12    Tuition Act.
13        (h) Information the disclosure of which is exempted
14    under the State Officials and Employees Ethics Act, and
15    records of any lawfully created State or local inspector
16    general's office that would be exempt if created or
17    obtained by an Executive Inspector General's office under
18    that Act.
19        (i) Information contained in a local emergency energy
20    plan submitted to a municipality in accordance with a
21    local emergency energy plan ordinance that is adopted
22    under Section 11-21.5-5 of the Illinois Municipal Code.
23        (j) Information and data concerning the distribution
24    of surcharge moneys collected and remitted by carriers
25    under the Emergency Telephone System Act.
26        (k) Law enforcement officer identification information

 

 

SB2294 Enrolled- 3 -LRB103 26927 KTG 53291 b

1    or driver identification information compiled by a law
2    enforcement agency or the Department of Transportation
3    under Section 11-212 of the Illinois Vehicle Code.
4        (l) Records and information provided to a residential
5    health care facility resident sexual assault and death
6    review team or the Executive Council under the Abuse
7    Prevention Review Team Act.
8        (m) Information provided to the predatory lending
9    database created pursuant to Article 3 of the Residential
10    Real Property Disclosure Act, except to the extent
11    authorized under that Article.
12        (n) Defense budgets and petitions for certification of
13    compensation and expenses for court appointed trial
14    counsel as provided under Sections 10 and 15 of the
15    Capital Crimes Litigation Act. This subsection (n) shall
16    apply until the conclusion of the trial of the case, even
17    if the prosecution chooses not to pursue the death penalty
18    prior to trial or sentencing.
19        (o) Information that is prohibited from being
20    disclosed under Section 4 of the Illinois Health and
21    Hazardous Substances Registry Act.
22        (p) Security portions of system safety program plans,
23    investigation reports, surveys, schedules, lists, data, or
24    information compiled, collected, or prepared by or for the
25    Department of Transportation under Sections 2705-300 and
26    2705-616 of the Department of Transportation Law of the

 

 

SB2294 Enrolled- 4 -LRB103 26927 KTG 53291 b

1    Civil Administrative Code of Illinois, the Regional
2    Transportation Authority under Section 2.11 of the
3    Regional Transportation Authority Act, or the St. Clair
4    County Transit District under the Bi-State Transit Safety
5    Act.
6        (q) Information prohibited from being disclosed by the
7    Personnel Record Review Act.
8        (r) Information prohibited from being disclosed by the
9    Illinois School Student Records Act.
10        (s) Information the disclosure of which is restricted
11    under Section 5-108 of the Public Utilities Act.
12        (t) (Blank). All identified or deidentified health
13    information in the form of health data or medical records
14    contained in, stored in, submitted to, transferred by, or
15    released from the Illinois Health Information Exchange,
16    and identified or deidentified health information in the
17    form of health data and medical records of the Illinois
18    Health Information Exchange in the possession of the
19    Illinois Health Information Exchange Office due to its
20    administration of the Illinois Health Information
21    Exchange. The terms "identified" and "deidentified" shall
22    be given the same meaning as in the Health Insurance
23    Portability and Accountability Act of 1996, Public Law
24    104-191, or any subsequent amendments thereto, and any
25    regulations promulgated thereunder.
26        (u) Records and information provided to an independent

 

 

SB2294 Enrolled- 5 -LRB103 26927 KTG 53291 b

1    team of experts under the Developmental Disability and
2    Mental Health Safety Act (also known as Brian's Law).
3        (v) Names and information of people who have applied
4    for or received Firearm Owner's Identification Cards under
5    the Firearm Owners Identification Card Act or applied for
6    or received a concealed carry license under the Firearm
7    Concealed Carry Act, unless otherwise authorized by the
8    Firearm Concealed Carry Act; and databases under the
9    Firearm Concealed Carry Act, records of the Concealed
10    Carry Licensing Review Board under the Firearm Concealed
11    Carry Act, and law enforcement agency objections under the
12    Firearm Concealed Carry Act.
13        (v-5) Records of the Firearm Owner's Identification
14    Card Review Board that are exempted from disclosure under
15    Section 10 of the Firearm Owners Identification Card Act.
16        (w) Personally identifiable information which is
17    exempted from disclosure under subsection (g) of Section
18    19.1 of the Toll Highway Act.
19        (x) Information which is exempted from disclosure
20    under Section 5-1014.3 of the Counties Code or Section
21    8-11-21 of the Illinois Municipal Code.
22        (y) Confidential information under the Adult
23    Protective Services Act and its predecessor enabling
24    statute, the Elder Abuse and Neglect Act, including
25    information about the identity and administrative finding
26    against any caregiver of a verified and substantiated

 

 

SB2294 Enrolled- 6 -LRB103 26927 KTG 53291 b

1    decision of abuse, neglect, or financial exploitation of
2    an eligible adult maintained in the Registry established
3    under Section 7.5 of the Adult Protective Services Act.
4        (z) Records and information provided to a fatality
5    review team or the Illinois Fatality Review Team Advisory
6    Council under Section 15 of the Adult Protective Services
7    Act.
8        (aa) Information which is exempted from disclosure
9    under Section 2.37 of the Wildlife Code.
10        (bb) Information which is or was prohibited from
11    disclosure by the Juvenile Court Act of 1987.
12        (cc) Recordings made under the Law Enforcement
13    Officer-Worn Body Camera Act, except to the extent
14    authorized under that Act.
15        (dd) Information that is prohibited from being
16    disclosed under Section 45 of the Condominium and Common
17    Interest Community Ombudsperson Act.
18        (ee) Information that is exempted from disclosure
19    under Section 30.1 of the Pharmacy Practice Act.
20        (ff) Information that is exempted from disclosure
21    under the Revised Uniform Unclaimed Property Act.
22        (gg) Information that is prohibited from being
23    disclosed under Section 7-603.5 of the Illinois Vehicle
24    Code.
25        (hh) Records that are exempt from disclosure under
26    Section 1A-16.7 of the Election Code.

 

 

SB2294 Enrolled- 7 -LRB103 26927 KTG 53291 b

1        (ii) Information which is exempted from disclosure
2    under Section 2505-800 of the Department of Revenue Law of
3    the Civil Administrative Code of Illinois.
4        (jj) Information and reports that are required to be
5    submitted to the Department of Labor by registering day
6    and temporary labor service agencies but are exempt from
7    disclosure under subsection (a-1) of Section 45 of the Day
8    and Temporary Labor Services Act.
9        (kk) Information prohibited from disclosure under the
10    Seizure and Forfeiture Reporting Act.
11        (ll) Information the disclosure of which is restricted
12    and exempted under Section 5-30.8 of the Illinois Public
13    Aid Code.
14        (mm) Records that are exempt from disclosure under
15    Section 4.2 of the Crime Victims Compensation Act.
16        (nn) Information that is exempt from disclosure under
17    Section 70 of the Higher Education Student Assistance Act.
18        (oo) Communications, notes, records, and reports
19    arising out of a peer support counseling session
20    prohibited from disclosure under the First Responders
21    Suicide Prevention Act.
22        (pp) Names and all identifying information relating to
23    an employee of an emergency services provider or law
24    enforcement agency under the First Responders Suicide
25    Prevention Act.
26        (qq) Information and records held by the Department of

 

 

SB2294 Enrolled- 8 -LRB103 26927 KTG 53291 b

1    Public Health and its authorized representatives collected
2    under the Reproductive Health Act.
3        (rr) Information that is exempt from disclosure under
4    the Cannabis Regulation and Tax Act.
5        (ss) Data reported by an employer to the Department of
6    Human Rights pursuant to Section 2-108 of the Illinois
7    Human Rights Act.
8        (tt) Recordings made under the Children's Advocacy
9    Center Act, except to the extent authorized under that
10    Act.
11        (uu) Information that is exempt from disclosure under
12    Section 50 of the Sexual Assault Evidence Submission Act.
13        (vv) Information that is exempt from disclosure under
14    subsections (f) and (j) of Section 5-36 of the Illinois
15    Public Aid Code.
16        (ww) Information that is exempt from disclosure under
17    Section 16.8 of the State Treasurer Act.
18        (xx) Information that is exempt from disclosure or
19    information that shall not be made public under the
20    Illinois Insurance Code.
21        (yy) Information prohibited from being disclosed under
22    the Illinois Educational Labor Relations Act.
23        (zz) Information prohibited from being disclosed under
24    the Illinois Public Labor Relations Act.
25        (aaa) Information prohibited from being disclosed
26    under Section 1-167 of the Illinois Pension Code.

 

 

SB2294 Enrolled- 9 -LRB103 26927 KTG 53291 b

1        (bbb) Information that is prohibited from disclosure
2    by the Illinois Police Training Act and the Illinois State
3    Police Act.
4        (ccc) Records exempt from disclosure under Section
5    2605-304 of the Illinois State Police Law of the Civil
6    Administrative Code of Illinois.
7        (ddd) Information prohibited from being disclosed
8    under Section 35 of the Address Confidentiality for
9    Victims of Domestic Violence, Sexual Assault, Human
10    Trafficking, or Stalking Act.
11        (eee) Information prohibited from being disclosed
12    under subsection (b) of Section 75 of the Domestic
13    Violence Fatality Review Act.
14        (fff) Images from cameras under the Expressway Camera
15    Act. This subsection (fff) is inoperative on and after
16    July 1, 2023.
17        (ggg) Information prohibited from disclosure under
18    paragraph (3) of subsection (a) of Section 14 of the Nurse
19    Agency Licensing Act.
20        (hhh) Information submitted to the Department of State
21    Police in an affidavit or application for an assault
22    weapon endorsement, assault weapon attachment endorsement,
23    .50 caliber rifle endorsement, or .50 caliber cartridge
24    endorsement under the Firearm Owners Identification Card
25    Act.
26(Source: P.A. 101-13, eff. 6-12-19; 101-27, eff. 6-25-19;

 

 

SB2294 Enrolled- 10 -LRB103 26927 KTG 53291 b

1101-81, eff. 7-12-19; 101-221, eff. 1-1-20; 101-236, eff.
21-1-20; 101-375, eff. 8-16-19; 101-377, eff. 8-16-19; 101-452,
3eff. 1-1-20; 101-466, eff. 1-1-20; 101-600, eff. 12-6-19;
4101-620, eff 12-20-19; 101-649, eff. 7-7-20; 101-652, eff.
51-1-22; 101-656, eff. 3-23-21; 102-36, eff. 6-25-21; 102-237,
6eff. 1-1-22; 102-292, eff. 1-1-22; 102-520, eff. 8-20-21;
7102-559, eff. 8-20-21; 102-813, eff. 5-13-22; 102-946, eff.
87-1-22; 102-1042, eff. 6-3-22; 102-1116, eff. 1-10-23.)
 
9    Section 5. The Department of Healthcare and Family
10Services Law is amended by adding Section 2205-40 as follows:
 
11    (20 ILCS 2205/2205-40 new)
12    Sec. 2205-40. Dissolution of the Health Information
13Exchange Office and Fund.
14    (a) Staff employed by the Illinois Health Information
15Exchange Office (Office) on the effective date of this
16amendatory Act of the 103rd General Assembly shall remain
17employed and continue their service within the Department of
18Healthcare and Family Services after the repeal of the
19Illinois Health Information Exchange and Technology Act and
20the cessation or dissolution of the Office. The status and
21rights of such employees shall not be affected by the repeal of
22the Illinois Health Information Exchange and Technology Act or
23the cessation of the Office except that, notwithstanding any
24other State law to the contrary, those employees shall

 

 

SB2294 Enrolled- 11 -LRB103 26927 KTG 53291 b

1maintain their seniority and their positions shall convert to
2titles of comparable organizational level under the Personnel
3Code and become subject to the Personnel Code. Other than the
4changes described in this paragraph, the rights of employees,
5the State of Illinois, and State agencies under the Personnel
6Code or under any pension, retirement, or annuity plan shall
7not be affected by this amendatory Act of the 103rd General
8Assembly.
9    (b) Notwithstanding any other provision of law to the
10contrary, and in addition to any other transfers that may be
11provided by law, on the effective date of this amendatory Act
12of the 103rd General Assembly, or as soon thereafter as
13practical, the State Comptroller shall direct and the State
14Treasurer shall transfer the remaining balance from the Health
15Information Exchange Fund to the General Revenue Fund. Upon
16completion of the transfer, the Health Information Exchange
17Fund is dissolved, and any future deposits due to that Fund and
18any outstanding obligations or liabilities of that Fund shall
19pass to the General Revenue Fund.
 
20    Section 10. The Illinois Health Information Exchange and
21Technology Act is amended by changing Section 997 as follows:
 
22    (20 ILCS 3860/997)
23    (Section scheduled to be repealed on January 1, 2027)
24    Sec. 997. Repealer. This Act is repealed on July 1, 2023

 

 

SB2294 Enrolled- 12 -LRB103 26927 KTG 53291 b

1January 1, 2027.
2(Source: P.A. 102-43, eff. 7-6-21.)
 
3    Section 15. The Illinois Public Aid Code is amended by
4changing Section 12-4.48 as follows:
 
5    (305 ILCS 5/12-4.48)
6    Sec. 12-4.48. Long-Term Services and Supports Disparities
7Workgroup Task Force.
8    (a) The Department of Healthcare and Family Services shall
9establish a Long-Term Services and Supports Disparities
10Workgroup of the Medicaid Advisory Committee in accordance
11with the requirements of 42 CFR 431.12 Task Force.
12    (b) Members of the Workgroup Task Force shall be appointed
13by the Director of the Department of Healthcare and Family
14Services and may shall include representatives of the
15following agencies, organizations, or groups:
16        (1) (Blank). The Governor's office.
17        (2) (Blank). The Department of Healthcare and Family
18    Services.
19        (3) (Blank). The Department of Human Services.
20        (4) (Blank). The Department on Aging.
21        (5) (Blank). The Department of Human Rights.
22        (6) (Blank). Area Agencies on Aging.
23        (7) (Blank). The Department of Public Health.
24        (8) Managed Care Plans.

 

 

SB2294 Enrolled- 13 -LRB103 26927 KTG 53291 b

1        (9) The for-profit urban nursing home or assisted
2    living industry.
3        (10) The for-profit rural nursing home or assisted
4    living industry.
5        (11) The not-for-profit nursing home or assisted
6    living industry.
7        (12) The home care association or home care industry.
8        (13) The adult day care association or adult day care
9    industry.
10        (14) An association representing workers who provide
11    long-term services and supports.
12        (15) A representative of providers that serve the
13    predominantly ethnic minority populations.
14        (16) Case Management Organizations.
15        (17) Three consumer representatives which may include
16    a consumer of long-term services and supports or an
17    individual who advocates for such consumers. For purposes
18    of this provision, "consumer representative" means a
19    person who is not an elected official and who has no
20    financial interest in a health or long-term care delivery
21    system.
22    (b-5) In addition, one representative from each of the
23following may serve ex officio: the Governor's Office; the
24Department of Healthcare and Family Services; the Department
25of Human Services; the Department on Aging; the Department of
26Public Health; and the Department of Human Rights.

 

 

SB2294 Enrolled- 14 -LRB103 26927 KTG 53291 b

1    (c) The Workgroup The Task Force shall not meet unless all
2consumer representative positions are filled. The Task Force
3shall reflect diversity in race, ethnicity, and gender.
4    (d) The Chair of the Workgroup Task Force shall be
5appointed by the Director of the Department of Healthcare and
6Family Services.
7    (e) The Director of the Department of Healthcare and
8Family Services shall assign appropriate staff and resources
9to support the efforts of the Workgroup. The Workgroup Task
10Force. The Task Force shall meet as often as necessary but not
11less than 4 times per calendar year.
12    (f) The Workgroup Task Force shall promote and facilitate
13communication, coordination, and collaboration among relevant
14State agencies and communities of color, limited
15English-speaking communities, and the private and public
16entities providing services to those communities.
17    (g) The Workgroup Task Force shall do all of the
18following:
19        (1) Document the number and types of Long-Term
20    Services and Supports (LTSS) providers in the State and
21    the number of clients served in each setting.
22        (2) Document the number and racial profiles of
23    residents using LTSS, including, but not limited to,
24    residential nursing facilities, assisted living
25    facilities, adult day care, home health services, and
26    other home and community based long-term care services.

 

 

SB2294 Enrolled- 15 -LRB103 26927 KTG 53291 b

1        (3) Document the number and profiles of family or
2    informal caregivers who provide care for minority elders.
3        (4) Compare data over multiple years to identify
4    trends in the delivery of LTSS for each racial or ethnic
5    category including: Alaskan Native or American Indian,
6    Asian or Pacific Islander, black or African American,
7    Hispanic, or white.
8        (5) Identify any racial disparities in the provision
9    of care in various LTSS settings and determine factors
10    that might influence the disparities found.
11        (6) Identify any disparities uniquely experienced in
12    metropolitan or rural areas and make recommendations to
13    address these areas.
14        (7) Assess whether the LTSS industry, including
15    managed care plans and independent providers, is equipped
16    to offer culturally sensitive, competent, and
17    linguistically appropriate care to meet the needs of a
18    diverse aging population and their informal and formal
19    caregivers.
20        (8) Consider whether to recommend that the State
21    require all home and community based services as a
22    condition of licensure to report data similar to that
23    gathered under the Minimum Data Set and required when a
24    new resident is admitted to a nursing home.
25        (9) Identify and prioritize recommendations for
26    actions to be taken by the State to address disparity

 

 

SB2294 Enrolled- 16 -LRB103 26927 KTG 53291 b

1    issues identified in the course of these studies.
2        (10) Monitor the progress of the State in eliminating
3    racial disparities in the delivery of LTSS.
4    (h) The Workgroup may Task Force shall conduct public
5hearings, inquiries, studies, and other forms of information
6gathering to identify how the actions of State government
7contribute to or reduce racial disparities in long-term care
8settings.
9    (i) The Workgroup Task Force shall report its findings and
10recommendations to the Governor and the General Assembly with
11annual no later than one year after the effective date of this
12amendatory Act of the 98th General Assembly. Annual reports
13shall be issued every year thereafter and shall include
14documentation of progress made to eliminate disparities in
15long-term care service settings.
16(Source: P.A. 98-825, eff. 8-1-14; 99-78, eff. 7-20-15.)
 
17    Section 20. The Medical Patient Rights Act is amended by
18changing Section 3 as follows:
 
19    (410 ILCS 50/3)  (from Ch. 111 1/2, par. 5403)
20    Sec. 3. The following rights are hereby established:
21        (a) The right of each patient to care consistent with
22    sound nursing and medical practices, to be informed of the
23    name of the physician responsible for coordinating his or
24    her care, to receive information concerning his or her

 

 

SB2294 Enrolled- 17 -LRB103 26927 KTG 53291 b

1    condition and proposed treatment, to refuse any treatment
2    to the extent permitted by law, and to privacy and
3    confidentiality of records except as otherwise provided by
4    law.
5        (b) The right of each patient, regardless of source of
6    payment, to examine and receive a reasonable explanation
7    of his total bill for services rendered by his physician
8    or health care provider, including the itemized charges
9    for specific services received. Each physician or health
10    care provider shall be responsible only for a reasonable
11    explanation of those specific services provided by such
12    physician or health care provider.
13        (c) In the event an insurance company or health
14    services corporation cancels or refuses to renew an
15    individual policy or plan, the insured patient shall be
16    entitled to timely, prior notice of the termination of
17    such policy or plan.
18        An insurance company or health services corporation
19    that requires any insured patient or applicant for new or
20    continued insurance or coverage to be tested for infection
21    with human immunodeficiency virus (HIV) or any other
22    identified causative agent of acquired immunodeficiency
23    syndrome (AIDS) shall (1) give the patient or applicant
24    prior written notice of such requirement, (2) proceed with
25    such testing only upon the written authorization of the
26    applicant or patient, and (3) keep the results of such

 

 

SB2294 Enrolled- 18 -LRB103 26927 KTG 53291 b

1    testing confidential. Notice of an adverse underwriting or
2    coverage decision may be given to any appropriately
3    interested party, but the insurer may only disclose the
4    test result itself to a physician designated by the
5    applicant or patient, and any such disclosure shall be in
6    a manner that assures confidentiality.
7        The Department of Insurance shall enforce the
8    provisions of this subsection.
9        (d) The right of each patient to privacy and
10    confidentiality in health care. Each physician, health
11    care provider, health services corporation and insurance
12    company shall refrain from disclosing the nature or
13    details of services provided to patients, except that such
14    information may be disclosed: (1) to the patient, (2) to
15    the party making treatment decisions if the patient is
16    incapable of making decisions regarding the health
17    services provided, (3) for treatment in accordance with 45
18    CFR 164.501 and 164.506, (4) for payment in accordance
19    with 45 CFR 164.501 and 164.506, (5) to those parties
20    responsible for peer review, utilization review, and
21    quality assurance, (6) for health care operations in
22    accordance with 45 CFR 164.501 and 164.506, (7) to those
23    parties required to be notified under the Abused and
24    Neglected Child Reporting Act or the Illinois Sexually
25    Transmissible Disease Control Act, or (8) as otherwise
26    permitted, authorized, or required by State or federal

 

 

SB2294 Enrolled- 19 -LRB103 26927 KTG 53291 b

1    law. This right may be waived in writing by the patient or
2    the patient's guardian or legal representative, but a
3    physician or other health care provider may not condition
4    the provision of services on the patient's, guardian's, or
5    legal representative's agreement to sign such a waiver. In
6    the interest of public health, safety, and welfare,
7    patient information, including, but not limited to, health
8    information, demographic information, and information
9    about the services provided to patients, may be
10    transmitted to or through a health information exchange,
11    as that term is defined in Section 2 of the Mental Health
12    and Developmental Disabilities Confidentiality Act, in
13    accordance with the disclosures permitted pursuant to this
14    Section. Patients shall be provided the opportunity to opt
15    out of their health information being transmitted to or
16    through a health information exchange in accordance with
17    the regulations, standards, or contractual obligations
18    adopted by the Illinois Health Information Exchange Office
19    in accordance with Section 9.6 of the Mental Health and
20    Developmental Disabilities Confidentiality Act, Section
21    9.6 of the AIDS Confidentiality Act, or Section 31.8 of
22    the Genetic Information Privacy Act, as applicable. In the
23    case of a patient choosing to opt out of having his or her
24    information available on an HIE, nothing in this Act shall
25    cause the physician or health care provider to be liable
26    for the release of a patient's health information by other

 

 

SB2294 Enrolled- 20 -LRB103 26927 KTG 53291 b

1    entities that may possess such information, including, but
2    not limited to, other health professionals, providers,
3    laboratories, pharmacies, hospitals, ambulatory surgical
4    centers, and nursing homes.
5(Source: P.A. 101-649, eff. 7-7-20.)
 
6    Section 25. The AIDS Confidentiality Act is amended by
7changing Section 3 as follows:
 
8    (410 ILCS 305/3)  (from Ch. 111 1/2, par. 7303)
9    Sec. 3. Definitions. When used in this Act:
10    (a) "AIDS" means acquired immunodeficiency syndrome.
11    (b) "Authority" means the Illinois Health Information
12Exchange Authority established pursuant to the Illinois Health
13Information Exchange and Technology Act.
14    (c) "Business associate" has the meaning ascribed to it
15under HIPAA, as specified in 45 CFR 160.103.
16    (d) "Covered entity" has the meaning ascribed to it under
17HIPAA, as specified in 45 CFR 160.103.
18    (e) "De-identified information" means health information
19that is not individually identifiable as described under
20HIPAA, as specified in 45 CFR 164.514(b).
21    (f) "Department" means the Illinois Department of Public
22Health or its designated agents.
23    (g) "Disclosure" has the meaning ascribed to it under
24HIPAA, as specified in 45 CFR 160.103.

 

 

SB2294 Enrolled- 21 -LRB103 26927 KTG 53291 b

1    (h) "Health care operations" has the meaning ascribed to
2it under HIPAA, as specified in 45 CFR 164.501.
3    (i) "Health care professional" means (i) a licensed
4physician, (ii) a licensed physician assistant, (iii) a
5licensed advanced practice registered nurse, (iv) an advanced
6practice registered nurse or physician assistant who practices
7in a hospital or ambulatory surgical treatment center and
8possesses appropriate clinical privileges, (v) a licensed
9dentist, (vi) a licensed podiatric physician, or (vii) an
10individual certified to provide HIV testing and counseling by
11a state or local public health department.
12    (j) "Health care provider" has the meaning ascribed to it
13under HIPAA, as specified in 45 CFR 160.103.
14    (k) "Health facility" means a hospital, nursing home,
15blood bank, blood center, sperm bank, or other health care
16institution, including any "health facility" as that term is
17defined in the Illinois Finance Authority Act.
18    (l) "Health information exchange" or "HIE" means a health
19information exchange or health information organization that
20oversees and governs the electronic exchange of health
21information that (i) is established pursuant to the Illinois
22Health Information Exchange and Technology Act, or any
23subsequent amendments thereto, and any administrative rules
24adopted thereunder; (ii) has established a data sharing
25arrangement with the Authority; or (iii) as of August 16,
262013, was designated by the Authority Board as a member of, or

 

 

SB2294 Enrolled- 22 -LRB103 26927 KTG 53291 b

1was represented on, the Authority Board's Regional Health
2Information Exchange Workgroup; provided that such designation
3shall not require the establishment of a data sharing
4arrangement or other participation with the Illinois Health
5Information Exchange or the payment of any fee. In certain
6circumstances, in accordance with HIPAA, an HIE will be a
7business associate.
8    (m) "Health oversight agency" has the meaning ascribed to
9it under HIPAA, as specified in 45 CFR 164.501.
10    (n) "HIPAA" means the Health Insurance Portability and
11Accountability Act of 1996, Public Law 104-191, as amended by
12the Health Information Technology for Economic and Clinical
13Health Act of 2009, Public Law 111-05, and any subsequent
14amendments thereto and any regulations promulgated thereunder.
15    (o) "HIV" means the human immunodeficiency virus.
16    (p) "HIV-related information" means the identity of a
17person upon whom an HIV test is performed, the results of an
18HIV test, as well as diagnosis, treatment, and prescription
19information that reveals a patient is HIV-positive, including
20such information contained in a limited data set. "HIV-related
21information" does not include information that has been
22de-identified in accordance with HIPAA.
23    (q) "Informed consent" means:
24        (1) where a health care provider, health care
25    professional, or health facility has implemented opt-in
26    testing, a process by which an individual or their legal

 

 

SB2294 Enrolled- 23 -LRB103 26927 KTG 53291 b

1    representative receives pre-test information, has an
2    opportunity to ask questions, and consents verbally or in
3    writing to the test without undue inducement or any
4    element of force, fraud, deceit, duress, or other form of
5    constraint or coercion; or
6        (2) where a health care provider, health care
7    professional, or health facility has implemented opt-out
8    testing, the individual or their legal representative has
9    been notified verbally or in writing that the test is
10    planned, has received pre-test information, has been given
11    the opportunity to ask questions and the opportunity to
12    decline testing, and has not declined testing; where such
13    notice is provided, consent for opt-out HIV testing may be
14    incorporated into the patient's general consent for
15    medical care on the same basis as are other screening or
16    diagnostic tests; a separate consent for opt-out HIV
17    testing is not required.
18    In addition, where the person providing informed consent
19is a participant in an HIE, informed consent requires a fair
20explanation that the results of the patient's HIV test will be
21accessible through an HIE and meaningful disclosure of the
22patient's opt-out right under Section 9.6 of this Act.
23    A health care provider, health care professional, or
24health facility undertaking an informed consent process for
25HIV testing under this subsection may combine a form used to
26obtain informed consent for HIV testing with forms used to

 

 

SB2294 Enrolled- 24 -LRB103 26927 KTG 53291 b

1obtain written consent for general medical care or any other
2medical test or procedure, provided that the forms make it
3clear that the subject may consent to general medical care,
4tests, or procedures without being required to consent to HIV
5testing, and clearly explain how the subject may decline HIV
6testing. Health facility clerical staff or other staff
7responsible for the consent form for general medical care may
8obtain consent for HIV testing through a general consent form.
9    (r) "Limited data set" has the meaning ascribed to it
10under HIPAA, as described in 45 CFR 164.514(e)(2).
11    (s) "Minimum necessary" means the HIPAA standard for
12using, disclosing, and requesting protected health information
13found in 45 CFR 164.502(b) and 164.514(d).
14    (s-1) "Opt-in testing" means an approach where an HIV test
15is presented by offering the test and the patient accepts or
16declines testing.
17    (s-3) "Opt-out testing" means an approach where an HIV
18test is presented such that a patient is notified that HIV
19testing may occur unless the patient declines.
20    (t) "Organized health care arrangement" has the meaning
21ascribed to it under HIPAA, as specified in 45 CFR 160.103.
22    (u) "Patient safety activities" has the meaning ascribed
23to it under 42 CFR 3.20.
24    (v) "Payment" has the meaning ascribed to it under HIPAA,
25as specified in 45 CFR 164.501.
26    (w) "Person" includes any natural person, partnership,

 

 

SB2294 Enrolled- 25 -LRB103 26927 KTG 53291 b

1association, joint venture, trust, governmental entity, public
2or private corporation, health facility, or other legal
3entity.
4    (w-5) "Pre-test information" means:
5        (1) a reasonable explanation of the test, including
6    its purpose, potential uses, limitations, and the meaning
7    of its results; and
8        (2) a reasonable explanation of the procedures to be
9    followed, including the voluntary nature of the test, the
10    availability of a qualified person to answer questions,
11    the right to withdraw consent to the testing process at
12    any time, the right to anonymity to the extent provided by
13    law with respect to participation in the test and
14    disclosure of test results, and the right to confidential
15    treatment of information identifying the subject of the
16    test and the results of the test, to the extent provided by
17    law.
18    Pre-test information may be provided in writing, verbally,
19or by video, electronic, or other means and may be provided as
20designated by the supervising health care professional or the
21health facility.
22    For the purposes of this definition, a qualified person to
23answer questions is a health care professional or, when acting
24under the supervision of a health care professional, a
25registered nurse, medical assistant, or other person
26determined to be sufficiently knowledgeable about HIV testing,

 

 

SB2294 Enrolled- 26 -LRB103 26927 KTG 53291 b

1its purpose, potential uses, limitations, the meaning of the
2test results, and the testing procedures in the professional
3judgment of a supervising health care professional or as
4designated by a health care facility.
5    (x) "Protected health information" has the meaning
6ascribed to it under HIPAA, as specified in 45 CFR 160.103.
7    (y) "Research" has the meaning ascribed to it under HIPAA,
8as specified in 45 CFR 164.501.
9    (z) "State agency" means an instrumentality of the State
10of Illinois and any instrumentality of another state that,
11pursuant to applicable law or a written undertaking with an
12instrumentality of the State of Illinois, is bound to protect
13the privacy of HIV-related information of Illinois persons.
14    (aa) "Test" or "HIV test" means a test to determine the
15presence of the antibody or antigen to HIV, or of HIV
16infection.
17    (bb) "Treatment" has the meaning ascribed to it under
18HIPAA, as specified in 45 CFR 164.501.
19    (cc) "Use" has the meaning ascribed to it under HIPAA, as
20specified in 45 CFR 160.103, where context dictates.
21(Source: P.A. 99-54, eff. 1-1-16; 99-173, eff. 7-29-15;
2299-642, eff. 7-28-16; 100-513, eff. 1-1-18.)
 
23    Section 30. The Genetic Information Privacy Act is amended
24by changing Section 10 as follows:
 

 

 

SB2294 Enrolled- 27 -LRB103 26927 KTG 53291 b

1    (410 ILCS 513/10)
2    Sec. 10. Definitions. As used in this Act:
3    "Office" means the Illinois Health Information Exchange
4Office established pursuant to the Illinois Health Information
5Exchange and Technology Act.
6    "Business associate" has the meaning ascribed to it under
7HIPAA, as specified in 45 CFR 160.103.
8    "Covered entity" has the meaning ascribed to it under
9HIPAA, as specified in 45 CFR 160.103.
10    "De-identified information" means health information that
11is not individually identifiable as described under HIPAA, as
12specified in 45 CFR 164.514(b).
13    "Disclosure" has the meaning ascribed to it under HIPAA,
14as specified in 45 CFR 160.103.
15    "Employer" means the State of Illinois, any unit of local
16government, and any board, commission, department,
17institution, or school district, any party to a public
18contract, any joint apprenticeship or training committee
19within the State, and every other person employing employees
20within the State.
21    "Employment agency" means both public and private
22employment agencies and any person, labor organization, or
23labor union having a hiring hall or hiring office regularly
24undertaking, with or without compensation, to procure
25opportunities to work, or to procure, recruit, refer, or place
26employees.

 

 

SB2294 Enrolled- 28 -LRB103 26927 KTG 53291 b

1    "Family member" means, with respect to an individual, (i)
2the spouse of the individual; (ii) a dependent child of the
3individual, including a child who is born to or placed for
4adoption with the individual; (iii) any other person
5qualifying as a covered dependent under a managed care plan;
6and (iv) all other individuals related by blood or law to the
7individual or the spouse or child described in subsections (i)
8through (iii) of this definition.
9    "Genetic information" has the meaning ascribed to it under
10HIPAA, as specified in 45 CFR 160.103.
11    "Genetic monitoring" means the periodic examination of
12employees to evaluate acquired modifications to their genetic
13material, such as chromosomal damage or evidence of increased
14occurrence of mutations that may have developed in the course
15of employment due to exposure to toxic substances in the
16workplace in order to identify, evaluate, and respond to
17effects of or control adverse environmental exposures in the
18workplace.
19    "Genetic services" has the meaning ascribed to it under
20HIPAA, as specified in 45 CFR 160.103.
21    "Genetic testing" and "genetic test" have the meaning
22ascribed to "genetic test" under HIPAA, as specified in 45 CFR
23160.103. "Genetic testing" includes direct-to-consumer
24commercial genetic testing.
25    "Health care operations" has the meaning ascribed to it
26under HIPAA, as specified in 45 CFR 164.501.

 

 

SB2294 Enrolled- 29 -LRB103 26927 KTG 53291 b

1    "Health care professional" means (i) a licensed physician,
2(ii) a licensed physician assistant, (iii) a licensed advanced
3practice registered nurse, (iv) a licensed dentist, (v) a
4licensed podiatrist, (vi) a licensed genetic counselor, or
5(vii) an individual certified to provide genetic testing by a
6state or local public health department.
7    "Health care provider" has the meaning ascribed to it
8under HIPAA, as specified in 45 CFR 160.103.
9    "Health facility" means a hospital, blood bank, blood
10center, sperm bank, or other health care institution,
11including any "health facility" as that term is defined in the
12Illinois Finance Authority Act.
13    "Health information exchange" or "HIE" means a health
14information exchange or health information organization that
15exchanges health information electronically that (i) is
16established pursuant to the Illinois Health Information
17Exchange and Technology Act, or any subsequent amendments
18thereto, and any administrative rules promulgated thereunder;
19(ii) has established a data sharing arrangement with the
20Office; or (iii) as of August 16, 2013, was designated by the
21Illinois Health Information Exchange Authority (now Office)
22Board as a member of, or was represented on, the Authority
23Board's Regional Health Information Exchange Workgroup;
24provided that such designation shall not require the
25establishment of a data sharing arrangement or other
26participation with the Illinois Health Information Exchange or

 

 

SB2294 Enrolled- 30 -LRB103 26927 KTG 53291 b

1the payment of any fee. In certain circumstances, in
2accordance with HIPAA, an HIE will be a business associate.
3    "Health oversight agency" has the meaning ascribed to it
4under HIPAA, as specified in 45 CFR 164.501.
5    "HIPAA" means the Health Insurance Portability and
6Accountability Act of 1996, Public Law 104-191, as amended by
7the Health Information Technology for Economic and Clinical
8Health Act of 2009, Public Law 111-05, and any subsequent
9amendments thereto and any regulations promulgated thereunder.
10    "Insurer" means (i) an entity that is subject to the
11jurisdiction of the Director of Insurance and (ii) a managed
12care plan.
13    "Labor organization" includes any organization, labor
14union, craft union, or any voluntary unincorporated
15association designed to further the cause of the rights of
16union labor that is constituted for the purpose, in whole or in
17part, of collective bargaining or of dealing with employers
18concerning grievances, terms or conditions of employment, or
19apprenticeships or applications for apprenticeships, or of
20other mutual aid or protection in connection with employment,
21including apprenticeships or applications for apprenticeships.
22    "Licensing agency" means a board, commission, committee,
23council, department, or officers, except a judicial officer,
24in this State or any political subdivision authorized to
25grant, deny, renew, revoke, suspend, annul, withdraw, or amend
26a license or certificate of registration.

 

 

SB2294 Enrolled- 31 -LRB103 26927 KTG 53291 b

1    "Limited data set" has the meaning ascribed to it under
2HIPAA, as described in 45 CFR 164.514(e)(2).
3    "Managed care plan" means a plan that establishes,
4operates, or maintains a network of health care providers that
5have entered into agreements with the plan to provide health
6care services to enrollees where the plan has the ultimate and
7direct contractual obligation to the enrollee to arrange for
8the provision of or pay for services through:
9        (1) organizational arrangements for ongoing quality
10    assurance, utilization review programs, or dispute
11    resolution; or
12        (2) financial incentives for persons enrolled in the
13    plan to use the participating providers and procedures
14    covered by the plan.
15    A managed care plan may be established or operated by any
16entity including a licensed insurance company, hospital or
17medical service plan, health maintenance organization, limited
18health service organization, preferred provider organization,
19third party administrator, or an employer or employee
20organization.
21    "Minimum necessary" means HIPAA's standard for using,
22disclosing, and requesting protected health information found
23in 45 CFR 164.502(b) and 164.514(d).
24    "Nontherapeutic purpose" means a purpose that is not
25intended to improve or preserve the life or health of the
26individual whom the information concerns.

 

 

SB2294 Enrolled- 32 -LRB103 26927 KTG 53291 b

1    "Organized health care arrangement" has the meaning
2ascribed to it under HIPAA, as specified in 45 CFR 160.103.
3    "Patient safety activities" has the meaning ascribed to it
4under 42 CFR 3.20.
5    "Payment" has the meaning ascribed to it under HIPAA, as
6specified in 45 CFR 164.501.
7    "Person" includes any natural person, partnership,
8association, joint venture, trust, governmental entity, public
9or private corporation, health facility, or other legal
10entity.
11    "Protected health information" has the meaning ascribed to
12it under HIPAA, as specified in 45 CFR 164.103.
13    "Research" has the meaning ascribed to it under HIPAA, as
14specified in 45 CFR 164.501.
15    "State agency" means an instrumentality of the State of
16Illinois and any instrumentality of another state which
17pursuant to applicable law or a written undertaking with an
18instrumentality of the State of Illinois is bound to protect
19the privacy of genetic information of Illinois persons.
20    "Treatment" has the meaning ascribed to it under HIPAA, as
21specified in 45 CFR 164.501.
22    "Use" has the meaning ascribed to it under HIPAA, as
23specified in 45 CFR 160.103, where context dictates.
24(Source: P.A. 100-513, eff. 1-1-18; 101-132, eff. 1-1-20;
25101-649, eff. 7-7-20.)
 

 

 

SB2294 Enrolled- 33 -LRB103 26927 KTG 53291 b

1    Section 35. The Mental Health and Developmental
2Disabilities Confidentiality Act is amended by changing
3Sections 2, 9.5, 9.6, 9.8, 9.9, and 9.11 as follows:
 
4    (740 ILCS 110/2)  (from Ch. 91 1/2, par. 802)
5    Sec. 2. The terms used in this Act, unless the context
6requires otherwise, have the meanings ascribed to them in this
7Section.
8    "Agent" means a person who has been legally appointed as
9an individual's agent under a power of attorney for health
10care or for property.
11    "Business associate" has the meaning ascribed to it under
12HIPAA, as specified in 45 CFR 160.103.
13    "Confidential communication" or "communication" means any
14communication made by a recipient or other person to a
15therapist or to or in the presence of other persons during or
16in connection with providing mental health or developmental
17disability services to a recipient. Communication includes
18information which indicates that a person is a recipient.
19"Communication" does not include information that has been
20de-identified in accordance with HIPAA, as specified in 45 CFR
21164.514.
22    "Covered entity" has the meaning ascribed to it under
23HIPAA, as specified in 45 CFR 160.103.
24    "Guardian" means a legally appointed guardian or
25conservator of the person.

 

 

SB2294 Enrolled- 34 -LRB103 26927 KTG 53291 b

1    "Health information exchange" or "HIE" means a health
2information exchange or health information organization that
3oversees and governs the electronic exchange of health
4information that (i) is established pursuant to the Illinois
5Health Information Exchange and Technology Act, or any
6subsequent amendments thereto, and any administrative rules
7promulgated thereunder; or (ii) has established a data sharing
8arrangement with the Illinois Health Information Exchange; or
9(iii) as of the effective date of this amendatory Act of the
1098th General Assembly, was designated by the Illinois Health
11Information Exchange Office Board as a member of, or was
12represented on, the Office Board's Regional Health Information
13Exchange Workgroup; provided that such designation shall not
14require the establishment of a data sharing arrangement or
15other participation with the Illinois Health Information
16Exchange or the payment of any fee.
17    "HIE purposes" means those uses and disclosures (as those
18terms are defined under HIPAA, as specified in 45 CFR 160.103)
19for activities of an HIE: (i) set forth in the Illinois Health
20Information Exchange and Technology Act or any subsequent
21amendments thereto and any administrative rules promulgated
22thereunder; or (ii) which are permitted under federal law.
23    "HIPAA" means the Health Insurance Portability and
24Accountability Act of 1996, Public Law 104-191, and any
25subsequent amendments thereto and any regulations promulgated
26thereunder, including the Security Rule, as specified in 45

 

 

SB2294 Enrolled- 35 -LRB103 26927 KTG 53291 b

1CFR 164.302-18, and the Privacy Rule, as specified in 45 CFR
2164.500-34.
3    "Integrated health system" means an organization with a
4system of care which incorporates physical and behavioral
5healthcare and includes care delivered in an inpatient and
6outpatient setting.
7    "Interdisciplinary team" means a group of persons
8representing different clinical disciplines, such as medicine,
9nursing, social work, and psychology, providing and
10coordinating the care and treatment for a recipient of mental
11health or developmental disability services. The group may be
12composed of individuals employed by one provider or multiple
13providers.
14    "Mental health or developmental disabilities services" or
15"services" includes but is not limited to examination,
16diagnosis, evaluation, treatment, training, pharmaceuticals,
17aftercare, habilitation or rehabilitation.
18    "Personal notes" means:
19        (i) information disclosed to the therapist in
20    confidence by other persons on condition that such
21    information would never be disclosed to the recipient or
22    other persons;
23        (ii) information disclosed to the therapist by the
24    recipient which would be injurious to the recipient's
25    relationships to other persons, and
26        (iii) the therapist's speculations, impressions,

 

 

SB2294 Enrolled- 36 -LRB103 26927 KTG 53291 b

1    hunches, and reminders.
2    "Parent" means a parent or, in the absence of a parent or
3guardian, a person in loco parentis.
4    "Recipient" means a person who is receiving or has
5received mental health or developmental disabilities services.
6    "Record" means any record kept by a therapist or by an
7agency in the course of providing mental health or
8developmental disabilities service to a recipient concerning
9the recipient and the services provided. "Records" includes
10all records maintained by a court that have been created in
11connection with, in preparation for, or as a result of the
12filing of any petition or certificate under Chapter II,
13Chapter III, or Chapter IV of the Mental Health and
14Developmental Disabilities Code and includes the petitions,
15certificates, dispositional reports, treatment plans, and
16reports of diagnostic evaluations and of hearings under
17Article VIII of Chapter III or under Article V of Chapter IV of
18that Code. Record does not include the therapist's personal
19notes, if such notes are kept in the therapist's sole
20possession for his own personal use and are not disclosed to
21any other person, except the therapist's supervisor,
22consulting therapist or attorney. If at any time such notes
23are disclosed, they shall be considered part of the
24recipient's record for purposes of this Act. "Record" does not
25include information that has been de-identified in accordance
26with HIPAA, as specified in 45 CFR 164.514. "Record" does not

 

 

SB2294 Enrolled- 37 -LRB103 26927 KTG 53291 b

1include a reference to the receipt of mental health or
2developmental disabilities services noted during a patient
3history and physical or other summary of care.
4    "Record custodian" means a person responsible for
5maintaining a recipient's record.
6    "Therapist" means a psychiatrist, physician, psychologist,
7social worker, or nurse providing mental health or
8developmental disabilities services or any other person not
9prohibited by law from providing such services or from holding
10himself out as a therapist if the recipient reasonably
11believes that such person is permitted to do so. Therapist
12includes any successor of the therapist.
13    "Therapeutic relationship" means the receipt by a
14recipient of mental health or developmental disabilities
15services from a therapist. "Therapeutic relationship" does not
16include independent evaluations for a purpose other than the
17provision of mental health or developmental disabilities
18services.
19(Source: P.A. 101-649, eff. 7-7-20.)
 
20    (740 ILCS 110/9.5)
21    Sec. 9.5. Use and disclosure of information to an HIE.
22    (a) An HIE, person, therapist, facility, agency,
23interdisciplinary team, integrated health system, business
24associate, or covered entity may, without a recipient's
25consent, use or disclose information from a recipient's record

 

 

SB2294 Enrolled- 38 -LRB103 26927 KTG 53291 b

1in connection with an HIE, including disclosure to the
2Illinois Health Information Exchange Office, an HIE, or the
3business associate of either. An HIE and its business
4associate may, without a recipient's consent, use or disclose
5and re-disclose such information for HIE purposes or for such
6other purposes as are specifically allowed under this Act.
7    (b) As used in this Section:
8        (1) "facility" means a developmental disability
9    facility as defined in Section 1-107 of the Mental Health
10    and Developmental Disabilities Code or a mental health
11    facility as defined in Section 1-114 of the Mental Health
12    and Developmental Disabilities Code; and
13        (2) the terms "disclosure" and "use" have the meanings
14    ascribed to them under HIPAA, as specified in 45 CFR
15    160.103.
16(Source: P.A. 101-649, eff. 7-7-20.)
 
17    (740 ILCS 110/9.6)
18    Sec. 9.6. HIE opt-out. Participants of The Illinois Health
19Information Exchange Office shall, through appropriate rules,
20standards, or contractual obligations, which shall be binding
21upon any HIE, as defined under Section 2, shall allow require
22that participants of such HIE provide each recipient whose
23record is accessible through the health information exchange
24the reasonable opportunity to expressly decline the further
25disclosure of the record by the health information exchange to

 

 

SB2294 Enrolled- 39 -LRB103 26927 KTG 53291 b

1third parties, except to the extent permitted by law such as
2for purposes of public health reporting. The HIE participants
3These rules, standards, or contractual obligations shall
4permit a recipient to revoke a prior decision to opt-out or a
5decision not to opt-out. These rules, standards, or
6contractual obligations shall provide for written notice of a
7recipient's right to opt-out which directs the recipient to a
8health information exchange website containing (i) an
9explanation of the purposes of the health information
10exchange; and (ii) audio, visual, and written instructions on
11how to opt-out of participation in whole or in part to the
12extent possible. The process for effectuating an opt-out These
13rules, standards, or contractual obligations shall be reviewed
14by the HIE participants annually and updated as the technical
15options develop. The recipient shall be provided meaningful
16disclosure regarding the health information exchange, and the
17recipient's decision whether to opt-out should be obtained
18without undue inducement or any element of force, fraud,
19deceit, duress, or other form of constraint or coercion. To
20the extent that HIPAA, as specified in 45 CFR 164.508(b)(4),
21prohibits a covered entity from conditioning the provision of
22its services upon an individual's provision of an
23authorization, an HIE participant shall not condition the
24provision of its services upon a recipient's decision to
25opt-out of further disclosure of the record by an HIE to third
26parties. The Illinois Health Information Exchange Office

 

 

SB2294 Enrolled- 40 -LRB103 26927 KTG 53291 b

1shall, through appropriate rules, standards, or contractual
2obligations, which shall be binding upon any HIE, as defined
3under Section 2, give consideration to the format and content
4of the meaningful disclosure and the availability to
5recipients of information regarding an HIE and the rights of
6recipients under this Section to expressly decline the further
7disclosure of the record by an HIE to third parties. The HIE
8participants Illinois Health Information Exchange Office shall
9also give annual consideration to enable a recipient to
10expressly decline the further disclosure by an HIE to third
11parties of selected portions of the recipient's record while
12permitting disclosure of the recipient's remaining patient
13health information. In giving establishing rules, standards,
14or contractual obligations binding upon HIEs under this
15Section to give effect to recipient disclosure preferences,
16the HIE participants Illinois Health Information Exchange
17Office in its discretion may consider the extent to which
18relevant health information technologies reasonably available
19to therapists and HIEs in this State reasonably enable the
20effective segmentation of specific information within a
21recipient's electronic medical record and reasonably enable
22the effective exclusion of specific information from
23disclosure by an HIE to third parties, as well as the
24availability of sufficient authoritative clinical guidance to
25enable the practical application of such technologies to
26effect recipient disclosure preferences. The provisions of

 

 

SB2294 Enrolled- 41 -LRB103 26927 KTG 53291 b

1this Section 9.6 shall not apply to the secure electronic
2transmission of data which is point-to-point communication
3directed by the data custodian. Any rules or standards
4promulgated under this Section which apply to HIEs shall be
5limited to that subject matter required by this Section and
6shall not include any requirement that an HIE enter a data
7sharing arrangement or otherwise participate with the Illinois
8Health Information Exchange. In connection with its annual
9consideration regarding the issue of segmentation of
10information within a medical record and prior to the adoption
11of any rules or standards regarding that issue, the Office
12Board shall consider information provided by affected persons
13or organizations regarding the feasibility, availability,
14cost, reliability, and interoperability of any technology or
15process under consideration by the Board. Nothing in this Act
16shall be construed to limit the authority of the Illinois
17Health Information Exchange Office to impose limits or
18conditions on consent for disclosures to or through any HIE,
19as defined under Section 2, which are more restrictive than
20the requirements under this Act or under HIPAA.
21(Source: P.A. 101-649, eff. 7-7-20.)
 
22    (740 ILCS 110/9.8)
23    Sec. 9.8. Business associates. An HIE, person, therapist,
24facility, agency, interdisciplinary team, integrated health
25system, business associate, covered entity, the Illinois

 

 

SB2294 Enrolled- 42 -LRB103 26927 KTG 53291 b

1Health Information Exchange Office, or entity facilitating the
2establishment or operation of an HIE may, without a
3recipient's consent, utilize the services of and disclose
4information from a recipient's record to a business associate,
5as defined by and in accordance with the requirements set
6forth under HIPAA. As used in this Section, the term
7"disclosure" has the meaning ascribed to it by HIPAA, as
8specified in 45 CFR 160.103.
9(Source: P.A. 101-649, eff. 7-7-20.)
 
10    (740 ILCS 110/9.9)
11    Sec. 9.9. Record locator service.
12    (a) An HIE, person, therapist, facility, agency,
13interdisciplinary team, integrated health system, business
14associate, covered entity, the Illinois Health Information
15Exchange Office, or entity facilitating the establishment or
16operation of an HIE may, without a recipient's consent,
17disclose the existence of a recipient's record to a record
18locator service, master patient index, or other directory or
19services necessary to support and enable the establishment and
20operation of an HIE.
21    (b) As used in this Section:
22        (1) the term "disclosure" has the meaning ascribed to
23    it under HIPAA, as specified in 45 CFR 160.103; and
24        (2) "facility" means a developmental disability
25    facility as defined in Section 1-107 of the Mental Health

 

 

SB2294 Enrolled- 43 -LRB103 26927 KTG 53291 b

1    and Developmental Disabilities Code or a mental health
2    facility as defined in Section 1-114 of the Mental Health
3    and Developmental Disabilities Code.
4(Source: P.A. 101-649, eff. 7-7-20.)
 
5    (740 ILCS 110/9.11)
6    Sec. 9.11. Establishment and disclosure of limited data
7sets and de-identified information.
8    (a) An HIE, person, therapist, facility, agency,
9interdisciplinary team, integrated health system, business
10associate, covered entity, the Illinois Health Information
11Exchange Office, or entity facilitating the establishment or
12operation of an HIE may, without a recipient's consent, use
13information from a recipient's record to establish, or
14disclose such information to a business associate to
15establish, and further disclose information from a recipient's
16record as part of a limited data set as defined by and in
17accordance with the requirements set forth under HIPAA, as
18specified in 45 CFR 164.514(e). An HIE, person, therapist,
19facility, agency, interdisciplinary team, integrated health
20system, business associate, covered entity, the Illinois
21Health Information Exchange Office, or entity facilitating the
22establishment or operation of an HIE may, without a
23recipient's consent, use information from a recipient's record
24or disclose information from a recipient's record to a
25business associate to de-identity the information in

 

 

SB2294 Enrolled- 44 -LRB103 26927 KTG 53291 b

1accordance with HIPAA, as specified in 45 CFR 164.514.
2    (b) As used in this Section:
3        (1) the terms "disclosure" and "use" shall have the
4    meanings ascribed to them by HIPAA, as specified in 45 CFR
5    160.103; and
6        (2) "facility" means a developmental disability
7    facility as defined in Section 1-107 of the Mental Health
8    and Developmental Disabilities Code or a mental health
9    facility as defined in Section 1-114 of the Mental Health
10    and Developmental Disabilities Code.
11(Source: P.A. 101-649, eff. 7-7-20.)
 
12    Section 40. The Workers' Compensation Act is amended by
13changing Section 8.2a as follows:
 
14    (820 ILCS 305/8.2a)
15    Sec. 8.2a. Electronic claims.
16    (a) The Director of Insurance shall adopt rules to do all
17of the following:
18        (1) Ensure that all health care providers and
19    facilities submit medical bills for payment on
20    standardized forms.
21        (2) Require acceptance by employers and insurers of
22    electronic claims for payment of medical services.
23        (3) Ensure confidentiality of medical information
24    submitted on electronic claims for payment of medical

 

 

SB2294 Enrolled- 45 -LRB103 26927 KTG 53291 b

1    services.
2        (4) Ensure that health care providers have an
3    opportunity to comply with requests for records by
4    employers and insurers for the authorization of the
5    payment of workers' compensation claims.
6        (5) Ensure that health care providers are responsible
7    for supplying only those medical records pertaining to the
8    provider's own claims that are minimally necessary under
9    the federal Health Insurance Portability and
10    Accountability Act of 1996.
11        (6) Provide that any electronically submitted bill
12    determined to be complete but not paid or objected to
13    within 30 days shall be subject to interest pursuant to
14    item (3) of subsection (d) of Section 8.2.
15        (7) Provide that the Department of Insurance shall
16    impose an administrative fine if it determines that an
17    employer or insurer has failed to comply with the
18    electronic claims acceptance and response process. The
19    amount of the administrative fine shall be no greater than
20    $1,000 per each violation, but shall not exceed $10,000
21    for identical violations during a calendar year.
22    (b) To the extent feasible, standards adopted pursuant to
23subdivision (a) shall be consistent with existing standards
24under the federal Health Insurance Portability and
25Accountability Act of 1996 and standards adopted under the
26Illinois Health Information Exchange and Technology Act.

 

 

SB2294 Enrolled- 46 -LRB103 26927 KTG 53291 b

1    (c) The rules requiring employers and insurers to accept
2electronic claims for payment of medical services shall be
3proposed on or before January 1, 2012, and shall require all
4employers and insurers to accept electronic claims for payment
5of medical services on or before June 30, 2012. The Director of
6Insurance shall adopt rules by January 1, 2019 to implement
7the changes to this Section made by this amendatory Act of the
8100th General Assembly. The Commission, with assistance from
9the Department and the Medical Fee Advisory Board, shall
10publish on its Internet website a companion guide to assist
11with compliance with electronic claims rules. The Medical Fee
12Advisory Board shall periodically review the companion guide.
13    (d) The Director of Insurance shall by rule establish
14criteria for granting exceptions to employers, insurance
15carriers, and health care providers who are unable to submit
16or accept medical bills electronically.
17(Source: P.A. 100-1117, eff. 11-27-18.)
 
18    Section 99. Effective date. This Act takes effect July 1,
192023.

 

 

SB2294 Enrolled- 47 -LRB103 26927 KTG 53291 b

1 INDEX
2 Statutes amended in order of appearance
3    5 ILCS 140/7.5
4    20 ILCS 2205/2205-40 new
5    20 ILCS 3860/997
6    305 ILCS 5/12-4.48
7    410 ILCS 50/3from Ch. 111 1/2, par. 5403
8    410 ILCS 305/3from Ch. 111 1/2, par. 7303
9    410 ILCS 513/10
10    740 ILCS 110/2from Ch. 91 1/2, par. 802
11    740 ILCS 110/9.5
12    740 ILCS 110/9.6
13    740 ILCS 110/9.8
14    740 ILCS 110/9.9
15    740 ILCS 110/9.11
16    820 ILCS 305/8.2a