CS/CS/HB 637

1
A bill to be entitled
2An act relating to electronic health records; amending s.
3395.3025, F.S.; expanding access to a patient's medical
4records to facilitate electronic exchange of data between
5certain health care facilities, practitioners, and
6providers and attending physicians; revising terminology
7regarding disclosure of patient records to conform to
8changes made by the act; amending s. 408.05, F.S.;
9removing responsibility of the Agency for Health Care
10Administration for monitoring certain grants and health
11care data; creating s. 408.051, F.S.; creating the
12"Florida eHealth Initiative Act"; providing legislative
13intent; providing definitions; requiring the agency to
14award and monitor grants to certain health information
15organizations; providing rulemaking authority regarding
16establishment of eligibility criteria; authorizing the
17agency to operate an Electronic Medical Records System
18Adoption Loan Program, subject to a specific
19appropriation; providing eligibility criteria; providing
20rulemaking authority regarding terms and conditions for
21the granting of loans; creating the Florida Health
22Information Exchange Advisory Council; providing for
23purpose, membership, terms of office, and duties of the
24council; requiring the council to consult with certain
25experts regarding the use of health information in medical
26research to conform with provisions in the Health
27Insurance Portability and Accountability Act; requiring
28the Florida Center for Health Information and Policy
29Analysis to provide staff support; requiring reports to
30the Governor and Legislature; providing for future
31abolition of the council; providing duties of the agency
32with regard to availability of specified information on
33the agency's Internet website; requiring the agency to
34develop and implement a plan to promote participation in
35regional and statewide health information exchanges;
36requiring the Office of Program Policy Analysis and
37Government Accountability to complete an independent
38evaluation of the grants program administered by the
39agency and submit the report to the Governor and
40Legislature; amending s. 408.062, F.S.; removing
41responsibility of the agency for developing an electronic
42health information network; amending s. 483.181, F.S.;
43expanding access to laboratory reports to facilitate
44exchange of data between certain health care practitioners
45and providers; providing an effective date.
46
47Be It Enacted by the Legislature of the State of Florida:
48
49     Section 1.  Subsection (4) of section 395.3025, Florida
50Statutes, is amended to read:
51     395.3025  Patient and personnel records; copies;
52examination.--
53     (4)  Patient records are confidential and must not be
54disclosed without the consent of the patient or his or her legal
55representative person to whom they pertain, but appropriate
56disclosure may be made without such consent to:
57     (a)  Licensed facility personnel, and attending physicians,
58or other health care practitioners and providers currently
59involved in the care or treatment of the patient for use only in
60connection with the treatment of the patient.
61     (b)  Licensed facility personnel only for administrative
62purposes or risk management and quality assurance functions.
63     (c)  The agency, for purposes of health care cost
64containment.
65     (d)  In any civil or criminal action, unless otherwise
66prohibited by law, upon the issuance of a subpoena from a court
67of competent jurisdiction and proper notice by the party seeking
68such records to the patient or his or her legal representative.
69     (e)  The department agency upon subpoena issued pursuant to
70s. 456.071, but the records obtained thereby must be used solely
71for the purpose of the department agency and the appropriate
72professional board in its investigation, prosecution, and appeal
73of disciplinary proceedings. If the department agency requests
74copies of the records, the facility shall charge no more than
75its actual copying costs, including reasonable staff time. The
76records must be sealed and must not be available to the public
77pursuant to s. 119.07(1) or any other statute providing access
78to records, nor may they be available to the public as part of
79the record of investigation for and prosecution in disciplinary
80proceedings made available to the public by the department
81agency or the appropriate regulatory board. However, the
82department agency must make available, upon written request by a
83practitioner against whom probable cause has been found, any
84such records that form the basis of the determination of
85probable cause.
86     (f)  The department of Health or its agent, for the purpose
87of establishing and maintaining a trauma registry and for the
88purpose of ensuring that hospitals and trauma centers are in
89compliance with the standards and rules established under ss.
90395.401, 395.4015, 395.4025, 395.404, 395.4045, and 395.405, and
91for the purpose of monitoring patient outcome at hospitals and
92trauma centers that provide trauma care services.
93     (g)  The Department of Children and Family Services or its
94agent, for the purpose of investigations of cases of abuse,
95neglect, or exploitation of children or vulnerable adults.
96     (h)  The State Long-Term Care Ombudsman Council and the
97local long-term care ombudsman councils, with respect to the
98records of a patient who has been admitted from a nursing home
99or long-term care facility, when the councils are conducting an
100investigation involving the patient as authorized under part II
101of chapter 400, upon presentation of identification as a council
102member by the person making the request. Disclosure under this
103paragraph shall only be made after a competent patient or the
104patient's representative has been advised that disclosure may be
105made and the patient has not objected.
106     (i)  A local trauma agency or a regional trauma agency that
107performs quality assurance activities, or a panel or committee
108assembled to assist a local trauma agency or a regional trauma
109agency in performing quality assurance activities. Patient
110records obtained under this paragraph are confidential and
111exempt from s. 119.07(1) and s. 24(a), Art. I of the State
112Constitution.
113     (j)  Organ procurement organizations, tissue banks, and eye
114banks required to conduct death records reviews pursuant to s.
115395.2050.
116     (k)  The Medicaid Fraud Control Unit in the Department of
117Legal Affairs pursuant to s. 409.920.
118     (l)  The Department of Financial Services, or an agent,
119employee, or independent contractor of the department who is
120auditing for unclaimed property pursuant to chapter 717.
121     (m)  A regional poison control center for purposes of
122treating a poison episode under evaluation, case management of
123poison cases, or compliance with data collection and reporting
124requirements of s. 395.1027 and the professional organization
125that certifies poison control centers in accordance with federal
126law.
127     Section 2.  Subsection (4) of section 408.05, Florida
128Statutes, is amended to read:
129     408.05  Florida Center for Health Information and Policy
130Analysis.--
131     (4)  TECHNICAL ASSISTANCE.--
132     (a)  The center shall provide technical assistance to
133persons or organizations engaged in health planning activities
134in the effective use of statistics collected and compiled by the
135center. The center shall also provide the following additional
136technical assistance services:
137     1.  Establish procedures identifying the circumstances
138under which, the places at which, the persons from whom, and the
139methods by which a person may secure data from the center,
140including procedures governing requests, the ordering of
141requests, timeframes for handling requests, and other procedures
142necessary to facilitate the use of the center's data. To the
143extent possible, the center should provide current data timely
144in response to requests from public or private agencies.
145     2.  Provide assistance to data sources and users in the
146areas of database design, survey design, sampling procedures,
147statistical interpretation, and data access to promote improved
148health-care-related data sets.
149     3.  Identify health care data gaps and provide technical
150assistance to other public or private organizations for meeting
151documented health care data needs.
152     4.  Assist other organizations in developing statistical
153abstracts of their data sets that could be used by the center.
154     5.  Provide statistical support to state agencies with
155regard to the use of databases maintained by the center.
156     6.  To the extent possible, respond to multiple requests
157for information not currently collected by the center or
158available from other sources by initiating data collection.
159     7.  Maintain detailed information on data maintained by
160other local, state, federal, and private agencies in order to
161advise those who use the center of potential sources of data
162which are requested but which are not available from the center.
163     8.  Respond to requests for data which are not available in
164published form by initiating special computer runs on data sets
165available to the center.
166     9.  Monitor innovations in health information technology,
167informatics, and the exchange of health information and maintain
168a repository of technical resources to support the development
169of a statewide health information exchange network.
170     (b)  The agency shall administer, manage, and monitor
171grants to not-for-profit organizations, regional health
172information organizations, public health departments, or state
173agencies that submit proposals for planning, implementation, or
174training projects to advance the development of a health
175information network. Any grant contract shall be evaluated to
176ensure the effective outcome of the health information project.
177     (b)(c)  The agency shall initiate, oversee, manage, and
178evaluate the integration of health care data from each state
179agency that collects, stores, and reports on health care issues
180and make that data available to any health care practitioner
181through a statewide state health information exchange network.
182     Section 3.  Section 408.051, Florida Statutes, is created
183to read:
184     408.051  Florida eHealth Initiative Act.--
185     (1)  SHORT TITLE.--This section may be cited as the
186"Florida eHealth Initiative Act."
187     (2)  LEGISLATIVE INTENT.--The Legislature recognizes that
188the exchange of electronic medical records will benefit
189consumers by increasing the quality and efficiency of health
190care throughout the state. It is the intent of the Legislature
191that the state promote and coordinate the establishment of a
192secure, privacy-protected, and interconnected statewide health
193information exchange.
194     (3)  DEFINITIONS.--As used in this section, the term:
195     (a)  "Electronic medical record" means a record of a
196person's medical treatment created by a licensed health care
197provider and stored in an interoperable and accessible digital
198format.
199     (b)  "Electronic medical records system" means an
200application environment composed of at least two of the
201following systems: a clinical data repository; clinical decision
202support; controlled medical vocabulary; computerized provider
203order entry; pharmacy; or clinical documentation. The
204application must be used by health care practitioners to
205document, monitor, and manage health care delivery within a
206health care delivery system and must be capable of
207interoperability within a health information exchange.
208     (c)  "Health information exchange" means an electronic
209system used to acquire, process, and transmit electronic medical
210records that can be shared in real time among authorized health
211care providers, health care facilities, health insurers, and
212other recipients, as authorized by law, to facilitate the
213provision of health care services.
214     (d)  "Health information organization" means an entity with
215a formal structure and established policies and procedures that
216serves as a neutral convener of local stakeholders to enable the
217secure and reliable exchange of electronic medical records among
218authorized health care stakeholders within a defined geographic
219region to facilitate improvements in health care quality,
220safety, and coordination of care.
221     (4)  MATCHING GRANTS.--
222     (a)  Subject to a specific appropriation, the agency shall
223award and monitor matching grants to health information
224organizations that submit proposals that advance the development
225of a statewide health information exchange. Funds awarded under
226this subsection shall be awarded on the basis of matching each
227$1 of state funds with $1 of local or private funds. Local or
228private funds may be provided in the form of cash or in-kind
229support or services. Grants may be awarded within the following
230categories: development, operation, and collaboration.
231     (b)  The agency shall, by rule, establish specific
232eligibility criteria for a health information organization to
233qualify for a grant under this subsection. These criteria shall
234include, at a minimum, documentation of the following:
235     1.  For development grants, the proposed organizational
236structure, the level of community support, including a list of
237key participants, a demonstration of available local or private
238matching funds, a timeline for development of the health
239information exchange, and proposed goals and metrics.
240     2.  For operation grants, a demonstration of available
241local or private matching funds and a detailed business plan,
242which shall include a timeline for implementation of the health
243information exchange, policies and procedures to protect the
244privacy and security of electronic medical records, and proposed
245goals and metrics.
246     3.  For collaboration grants, a demonstration of available
247local or private matching funds, memoranda of understanding
248between at least two health information organizations for the
249exchange of electronic medical records, a demonstration of
250consistent utilization of the health information exchange by
251members within each participating health information
252organization, and a detailed business plan, which shall include
253a timeline for the implementation of the exchange of electronic
254medical records between participating health information
255organizations, policies and procedures to protect the privacy
256and security of electronic medical records, and proposed goals
257and metrics.
258     (c)  Beginning July 1, 2008, the agency shall not award a
259health information organization more than 6 aggregate years of
260funding.
261     (d)  The agency shall award grants in consultation with the
262Florida Health Information Exchange Advisory Council.
263     (5)  ELECTRONIC MEDICAL RECORDS SYSTEM ADOPTION LOAN
264PROGRAM.--
265     (a)  Subject to a specific appropriation, the agency shall
266operate an Electronic Medical Records System Adoption Loan
267Program for the purpose of providing a one-time, no-interest
268loan to eligible physicians licensed under chapter 458 or
269chapter 459 or to an eligible business entity whose shareholders
270are licensed under chapter 458 or chapter 459 for the initial
271costs of implementing an electronic medical records system.
272     (b)  In order to be eligible for a loan under this
273subsection, each physician must demonstrate that he or she has
274practiced continuously within the state for the previous 3
275years.
276     (c)  The agency shall not provide a loan to a physician who
277has or a business entity whose physician has:
278     1.  Been found guilty of violating s. 456.072(1) or been
279disciplined under the applicable licensing chapter in the
280previous 5 years.
281     2.  Been found guilty of or entered a plea of guilty or
282nolo contendere to a violation of s. 409.920 or s. 409.9201.
283     3.  Been sanctioned pursuant to s. 409.913 for fraud or
284abuse.
285     (d)  A loan may be provided to an eligible physician or
286business entity in a lump-sum amount to pay for the costs of
287purchasing hardware and software, subscription services,
288professional consultation, and staff training. The agency shall
289provide guidance to loan recipients by providing, at a minimum,
290a list of electronic medical records systems recognized or
291certified by national standards-setting entities as capable of
292being used to communicate with a health information exchange.
293     (e)  The agency shall distribute a minimum of 25 percent of
294funds appropriated to this program to physicians or business
295entities operating within a rural county as defined in s.
296288.106(1)(r).
297     (f)  The agency shall, by rule, develop standard terms and
298conditions for use in this program. At a minimum, these terms
299and conditions shall require:
300     1.  Loan repayment by the physician or business entity
301within a reasonable period of time, which may not be longer than
30272 months after the funding of the loan.
303     2.  Equal periodic payments that commence within 3 months
304after the funding of the loan.
305     3.  The eligible physician or business entity to execute a
306promissory note and a security agreement in favor of the state.
307The security agreement shall be a purchase-money security
308interest pledging as collateral for the loan the specific
309hardware and software purchased with the loan proceeds. The
310agency shall prepare and record a financing statement under
311chapter 679. The physician or business entity shall be
312responsible for paying the cost of recording the financing
313statement. The security agreement shall further require that the
314physician or business entity pay all collection costs, including
315attorney's fees.
316     (g)  The agency shall further require the physician or
317business entity to provide additional security under one of the
318following subparagraphs:
319     1.  An irrevocable letter of credit, as defined in chapter
320675, in an amount equal to the amount of the loan.
321     2.  An escrow account consisting of cash or assets eligible
322for deposit in accordance with s. 625.52 in an amount equal to
323the amount of the loan. If the escrow agent is responsible for
324making the periodic payments on the loan, the required escrow
325balance may be diminished as payments are made.
326     3.  A pledge of the accounts receivables of the physician
327or business entity. This pledge shall be reflected on the
328financing statement.
329     (h)  All payments received from or on behalf of a physician
330or business entity under this program shall be deposited into
331the agency's Administrative Trust Fund to be used to fund new
332loans.
333     (i)  If a physician or business entity that has received a
334loan under this section ceases to provide care or services to
335patients, or if the physician or business entity defaults in any
336payment and the default continues for 30 days, the entire loan
337balance shall be immediately due and payable and shall bear
338interest from that point forward at the rate of 18 percent
339annually. Upon default, the agency may offset any moneys owed to
340the physician or business entity from the state and apply the
341offset against the outstanding balance.
342     (j)  If a physician defaults in any payment and if the
343default continues for 30 days, the default shall constitute
344grounds for disciplinary action under chapter 458 or chapter 459
345and s. 456.072(1)(k).
346     (6)  FLORIDA HEALTH INFORMATION EXCHANGE ADVISORY
347COUNCIL.--
348     (a)  The Florida Health Information Exchange Advisory
349Council is created as an adjunct to the agency. The council is
350subject to the requirements of s. 20.052, except that only state
351officers and employees shall be reimbursed for per diem and
352travel expenses pursuant to s. 112.061.
353     (b)  The purpose of the council is to:
354     1.  Promote participation in regional and statewide health
355information exchanges and adoption of health information
356technology to support the infrastructure capacity for regional
357and statewide health information exchanges.
358     2.  Conduct outreach and convene forums to educate
359stakeholders regarding the benefits of utilizing a health
360information exchange.
361     3.  Provide guidance to stakeholders regarding the
362effective use of health information exchanges and standards for
363protecting the privacy and security of electronic medical
364records.
365     (c)  The council shall consist of the following members:
366     1.  The Secretary of Health Care Administration, or his or
367her designee.
368     2.  The State Surgeon General, or his or her designee.
369     3.  Two members appointed by and serving at the pleasure of
370the Governor, of which:
371     a.  One member must be from the health insurance industry.
372     b.  One member must be a consumer who is a resident of the
373state.
374     4.  Four members appointed by and serving at the pleasure
375of the President of the Senate, of which:
376     a.  One member must be from a hospital utilizing an
377electronic medical records system.
378     b.  One member must be a physician utilizing an electronic
379medical records system in his or her practice.
380     c.  One member must be a representative of an operating
381health information organization in the state.
382     d.  One member must be from a federally qualified health
383center or other rural health organization utilizing an
384electronic medical records system.
385     5.  Four members appointed by and serving at the pleasure
386of the Speaker of the House of Representatives, of which:
387     a.  One member must be from a hospital utilizing an
388electronic medical records system.
389     b.  One member must be a physician utilizing an electronic
390medical records system in his or her practice.
391     c.  One member must be a representative of an operating
392health information organization in the state.
393     d.  One member must be from a federally qualified health
394center or other rural health organization utilizing an
395electronic medical records system.
396     (d)  A member who is a representative of an operating
397health information organization in the state must recuse himself
398or herself during discussion, evaluation, or recommendation of a
399grant application.
400     (e)  Each member of the council subject to appointment
401shall be appointed to serve for a term of 4 years following the
402date of appointment. A vacancy shall be filled by appointment
403for the remainder of the term. Appointments shall be made within
40445 days after the effective date of this section.
405     (f)  The council may meet at the call of the chair or at
406the request of a majority of its membership, but the council
407must meet at least quarterly. Meetings of the council may be
408held via teleconference or other electronic means.
409     (g)  Members shall elect a chair and vice chair annually.
410     (h)  A majority of the members constitutes a quorum and the
411affirmative vote of a majority of a quorum is necessary to take
412action.
413     (i)  The council's duties and responsibilities include, but
414are not limited to, developing recommendations to:
415     1.  Establish standards for all state-funded health
416information exchange efforts. Such standards shall include, but
417are not limited to, policies and procedures to protect the
418privacy and security of electronic medical records.
419     2.  Remove barriers, including, but not limited to,
420technological, regulatory, and financial barriers, that limit
421participation by health care providers, health care facilities,
422and health insurers in a health information exchange.
423     3.  Remove barriers that prevent consumers from having
424access to their electronic medical records.
425     4.  Provide incentives to promote participation by health
426care providers, health care facilities, and health insurers in
427health information exchanges.
428     5.  Identify health care data held by state agencies and
429remove barriers to making that data available to authorized
430recipients through health information exchanges in a private and
431secure manner.
432     6.  Increase state agency participation in health
433information exchanges.
434     7.  Partner with other state, regional, and federal
435entities to promote and coordinate health information exchange
436efforts.
437     8.  Create a long-term plan for an interoperable statewide
438network of health information organizations.
439
440The council shall establish ad hoc issue-oriented technical
441workgroups on an as-needed basis to make recommendations to the
442council. The council shall consult with experts in the use of
443health information in medical research to ensure that all
444recommendations are consistent with the Health Insurance
445Portability and Accountability Act of 1996, Pub. L. No. 104-199,
44642 U.S.C. ss. 1301 et seq., and take into account the legitimate
447uses of health information for medical research, drug
448development, clinical trials, postapproval surveillance, and
449public health and public agency reporting requirements.
450     (j)  The Florida Center for Health Information and Policy
451Analysis within the agency shall provide, within existing
452resources, staff support to enable the council to carry out its
453responsibilities under this section.
454     (k)  Beginning July 1, 2009, the council shall annually
455provide a report to the Governor, the President of the Senate,
456the Speaker of the House of Representatives, and the chairs of
457the appropriate substantive committees of the Senate and the
458House of Representatives that includes, but is not limited to,
459the recommendations regarding the council's duties and
460responsibilities. In addition, by July 1, 2010, the council
461shall recommend a long-term plan to create an interoperable
462statewide network of health information organizations to the
463Governor, the President of the Senate, the Speaker of the House
464of Representatives, and the chairs of the appropriate
465substantive committees of the Senate and the House of
466Representatives.
467     (l)  This subsection is repealed and the council shall
468stand abolished July 1, 2012, unless reviewed and saved from
469repeal through reenactment by the Legislature.
470     (7)  AGENCY FOR HEALTH CARE ADMINISTRATION; DUTIES.--
471     (a)  The agency shall develop and maintain on its Internet
472website the following information:
473     1.  Federal and private sector health information exchange
474funding programs, including analyses of successful local and
475state recipients of the programs, as well as unsuccessful local
476and state applicants of the programs.
477     2.  A clearinghouse of state and national legislative,
478regulatory, and public awareness activities related to health
479information exchanges.
480     (b)  The agency shall develop and implement a plan that
481promotes, at a minimum, participation in regional and statewide
482health information exchanges and the adoption of electronic
483medical records systems by physicians through the Electronic
484Medical Records System Adoption Loan Program, in consultation
485with the Florida Health Information Exchange Advisory Council,
486organizations representing allopathic and osteopathic practicing
487physicians, the Board of Medicine, and the Board of Osteopathic
488Medicine.
489     (8)  PROGRAM EVALUATION; REPORT.--The Office of Program
490Policy Analysis and Government Accountability shall complete an
491independent evaluation of the grants program administered by the
492agency. The evaluation must include, at a minimum, assessments
493of the grant evaluation and distribution process; the way in
494which grant dollars are spent; the level of participation by
495entities within each grantee's project; the extent of clinical
496data exchange among entities within each grantee's project; the
497sources of funding for each grantee; and the feasibility of each
498grantee achieving long-term sustainability without state grant
499funding. The evaluation must assess the level at which the
500current grants program is advancing the development of a
501statewide health information exchange and recommend other
502programs that may accomplish the same goal. The report shall be
503submitted to the Governor, the President of the Senate, the
504Speaker of the House of Representatives, and the chairs of the
505relevant committees in the Senate and the House of
506Representatives no later than July 1, 2009.
507     Section 4.  Subsection (5) of section 408.062, Florida
508Statutes, is amended to read:
509     408.062  Research, analyses, studies, and reports.--
510     (5)  The agency shall develop and implement a strategy for
511the adoption and use of electronic health records, including the
512development of an electronic health information network for the
513sharing of electronic health records among health care
514facilities, health care providers, and health insurers. The
515agency may develop rules to facilitate the functionality and
516protect the confidentiality of electronic health records. The
517agency shall report to the Governor, the Speaker of the House of
518Representatives, and the President of the Senate on legislative
519recommendations to protect the confidentiality of electronic
520health records.
521     Section 5.  Subsection (2) of section 483.181, Florida
522Statutes, is amended to read:
523     483.181  Acceptance, collection, identification, and
524examination of specimens.--
525     (2)  The results of a test must be reported directly to the
526licensed practitioner or other authorized person who requested
527it, and appropriate disclosure may be made by the clinical
528laboratory without a patient's consent to other health care
529practitioners and providers involved in the care or treatment of
530the patient for use in connection with the treatment of the
531patient. The report must include the name and address of the
532clinical laboratory in which the test was actually performed,
533unless the test was performed in a hospital laboratory and the
534report becomes an integral part of the hospital record.
535     Section 6.  This act shall take effect upon becoming a law.


CODING: Words stricken are deletions; words underlined are additions.