THE SENATE	S.B. NO.	2849
TWENTY-SEVENTH LEGISLATURE, 2014
STATE OF HAWAII

A BILL FOR AN ACT

RELATING TO COMPLIANCE WITH THE HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT.

BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF HAWAII:

     SECTION 1.  The purpose of this Act is to promote compliance with information privacy and security provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA; Pub.L. 104-131) and the related HIPAA Privacy Rule and HIPAA Security Rule.

     The department of health is considered a covered entity for purposes of HIPAA compliance, and as such is required to designate (1) a privacy official responsible for the development and implementation of privacy-related policies and procedures per 45 Code of Federal (C.F.R.) 164.530(a)(1), and (2) a security official responsible for coordinating information security compliance per 45 C.F.R. 164.308(a)(2).

     SECTION 2.  Chapter 321, Hawaii Revised Statutes, is amended by adding a new section to be appropriately designated and to read as follows:

     "§321-  Information privacy and security. The department of health shall establish the following permanent or temporary exempt positions for the purpose of department compliance with federal information privacy and security rules:

(1) Privacy Officer; and

(2) Security Officer.

The positions shall be appointed by the director without regard to chapter 76."

     SECTION 3.  New statutory material is underscored.

     SECTION 4.  This Act shall take effect upon its approval.

INTRODUCED BY:	_____________________________
	BY REQUEST

Report Title:

Department of Health Information Privacy and Security; Health Insurance Portability and Accountability Act

Description:

Authorizes the Department of Health to create permanent or temporary exempt Privacy Officer and Security Officer positions.

The summary description of legislation appearing on this page is for informational purposes only and is not legislation or evidence of legislative intent.