26B-3-126. Patient notice of health care provider privacy practices.
| (1) |
Terms Used In Utah Code 26B-3-126- Medicaid program: means the state program for medical assistance for persons who are eligible under the state plan adopted pursuant to Title XIX of the federal Social Security Act. See Utah Code 26B-3-101
- State: when applied to the different parts of the United States, includes a state, district, or territory of the United States. See Utah Code 68-3-12.5
| (a) |
For purposes of this section:
| (i) |
“Health care provider” means a health care provider as defined in Section 78B-3-403 who:
| (A) |
receives payment for medical services from the Medicaid program established in this chapter, or the Children’s Health Insurance Program established in Section 26B-3-902; and |
| (B) |
submits a patient’s personally identifiable information to the Medicaid eligibility database or the Children’s Health Insurance Program eligibility database. |
|
| (ii) |
“HIPAA” means 45 C.F.R. Parts 160, 162, and 164, Health Insurance Portability and Accountability Act of 1996, as amended. |
|
| (b) |
Beginning July 1, 2013, this section applies to the Medicaid program, the Children’s Health Insurance Program created in Section 26B-3-902, and a health care provider. |
|
| (2) |
A health care provider shall, as part of the notice of privacy practices required by HIPAA, provide notice to the patient or the patient’s personal representative that the health care provider either has, or may submit, personally identifiable information about the patient to the Medicaid eligibility database and the Children’s Health Insurance Program eligibility database. |
| (3) |
The Medicaid program and the Children’s Health Insurance Program may not give a health care provider access to the Medicaid eligibility database or the Children’s Health Insurance Program eligibility database unless the health care provider’s notice of privacy practices complies with Subsection (2). |
| (4) |
The department may adopt an administrative rule to establish uniform language for the state requirement regarding notice of privacy practices to patients required under Subsection (2). |
Renumbered and Amended by Chapter 306, 2023 General Session
