REPRODUCTIVE HEALTH PRIVACY
HB5295, titled the Reproductive Health Records Privacy Act, creates a new privacy framework for certain reproductive-health-related information stored or exchanged through electronic health networks. The bill defines “private health care information” to include coded health data and information related to abortion and abortion-related services, as well as diagnosis codes associated with gender dysphoria. It also defines “coded private health care information” broadly to include coding systems such as CPT, HCPCS, and National Drug Codes when tied to specified reproductive-health events or services.
The bill requires electronic health networks to prevent disclosure of this protected information to out-of-state providers, business entities, other networks, or health information exchanges except in limited circumstances, such as technical support, quality assurance, payment, health care operations, or when the patient or an authorized decision-maker consents. It further requires networks to build technological capabilities to parse and segregate protected information, allow manual segregation by providers, permit patients to direct sharing or revoke prior sharing decisions, and provide information to covered entities about these rights. The Department of Public Health is authorized to adopt implementing rules, including rules defining private health care information and any necessary exceptions.
HB5295 would affect Illinois health privacy law by imposing specific duties on electronic health networks and by creating a private right of action for people harmed by violations. A successful plaintiff may recover actual damages, injunctive relief, attorney’s fees, and costs, but the bill expressly states that it does not authorize suits against health care providers themselves. It also says it does not weaken existing confidentiality protections under the Lawful Health Care Activity Act or the Personal Information Protection Act, and it does not require providers to use electronic health networks at all.
The general sentiment suggested by the bill text is strongly supportive of reproductive-health privacy and patient control over sensitive medical information. Because there are no committee transcripts or recorded votes provided, there is no direct evidence of debate or bipartisan support in the available materials. The structure of the bill, however, indicates a policy goal of shielding abortion-related and related sensitive health data from disclosure, especially across state lines.
The main points of potential contention are the scope of the protected information, the operational burden on electronic health networks, and the inclusion of gender dysphoria-related diagnosis codes in the privacy definition. Another likely issue is the bill’s out-of-state disclosure restrictions and the requirement that networks develop new technical segregation capabilities, which could raise implementation and compliance concerns for health IT vendors and covered entities.
The bill would add a new statutory privacy regime governing electronic health networks in Illinois, with specific obligations to segregate, restrict, and condition disclosure of reproductive-health-related information. It would create enforceable duties for network operators, authorize rulemaking by the Department of Public Health, and establish a private cause of action for aggrieved persons, while expressly preserving existing health privacy laws and not imposing a mandate on providers to use electronic networks.
The bill appears to be framed as a patient-privacy and reproductive-health-protection measure, with a clear pro-privacy orientation. No committee discussion or vote history is available, so there is no recorded opposition or support to summarize beyond the bill’s text itself. Based on the language, the measure is likely intended to appeal to supporters of abortion privacy, data minimization, and patient autonomy.
Likely areas of contention include whether the bill’s definition of protected information is too broad, whether it imposes costly or technically difficult requirements on electronic health networks, and whether it could complicate interstate health information exchange. Stakeholders most likely to raise concerns would be health information technology developers, electronic health networks, and possibly providers worried about workflow and compliance burdens. Supporters would likely include reproductive-rights advocates, privacy advocates, and patients seeking stronger control over sensitive medical records.