1. Residents of long-term care facilities in this state shall have the right to place in the resident’s room an authorized electronic monitoring device that is owned and operated by the resident or provided by the resident’s guardian or legal representative.

2. No facility shall be civilly or criminally liable for activity or action arising out of the use by any resident or any resident’s guardian or legal representative of any electronic monitoring device, including the facility’s inadvertent or intentional disclosure of a recording made by a resident, or by a person who consents on behalf of the resident, for any purpose not authorized under sections 198.610 to 198.632.

3. No facility shall be civilly or criminally liable for a violation of the Health Insurance Portability and Accountability Act (HIPAA) or any resident’s right to privacy arising out of any electronic monitoring conducted under sections 198.610 to 198.632.

4. Except for cases of abuse and neglect, no person shall release any recording made under sections 198.610 to 198.632 without the written permission of the resident or the resident’s guardian or legal representative and the long-term care facility.

5. The department shall promulgate rules to implement the provisions of sections 198.610 to 198.632. Any rule or portion of a rule, as that term is defined in section 536.010, that is created under the authority delegated in this section shall become effective only if it complies with and is subject to all of the provisions of chapter 536 and, if applicable, section 536.028. This section and chapter 536 are nonseverable, and if any of the powers vested with the general assembly pursuant to chapter 536 to review, to delay the effective date, or to disapprove and annul a rule are subsequently held unconstitutional, then the grant of rulemaking authority and any rule proposed or adopted after August 28, 2020, shall be invalid and void.