personal identifying information; disclosure; prohibition
Summary
SB1193 restricts the Arizona Department of Health Services from selling or disclosing personal identifying information of certain regulated individuals. The bill applies to people the department licenses or certifies under Title 36 or Title 32, and separately to emergency medical care technicians. In both cases, the information is deemed confidential and is exempt from public records requests made for commercial purposes, unless the individual consents to disclosure.
The bill defines personal identifying information broadly to include items such as Social Security numbers, passport and driver license numbers, taxpayer identification numbers, home contact information, biometric data, and certain combinations of bulk data that could identify a person. It also allows the department to share de-identified or aggregated information, and it preserves the department’s ability to share licensure- or certification-related information with other regulatory entities, including commissions that administer licensure compacts.
Impact
SB1193 amends Title 36 of the Arizona Revised Statutes by adding two new sections that create confidentiality and disclosure limits for department-held personal identifying information. It narrows the department’s ability to release records for commercial use, while preserving consent-based disclosure, de-identified reporting, and interagency licensure-sharing. The bill affects licensed or certified individuals under Titles 36 and 32, as well as emergency medical care technicians, and it interacts with Arizona’s public records law by creating specific exemptions.
Sentiment
The bill appears to have been broadly supported and moved through the legislature with little opposition. Committee votes were overwhelmingly favorable, including unanimous or near-unanimous committee approvals and a 51-3 House third-reading vote. The final action shows the bill was signed into law, indicating strong overall legislative backing.
Contention
There is little evidence of major controversy in the available record. The main policy balance is between privacy protection and transparency: supporters favored restricting commercial disclosure of sensitive personal data, while the bill still preserves access for regulatory coordination and de-identified data use. Any remaining concern would likely center on how broadly the confidentiality provisions apply and whether they could limit public access to licensing information, but the recorded votes suggest those concerns did not generate significant opposition.
"New Jersey Disclosure and Accountability Transparency Act (NJ DaTA)"; establishes certain requirements for disclosure and processing of personally identifiable information; establishes Office of Data Protection and Responsible Use in Division of Consumer Affairs.
"New Jersey Disclosure and Accountability Transparency Act (NJ DaTA)"; establishes certain requirements for disclosure and processing of personally identifiable information; establishes Office of Data Protection and Responsible Use in Division of Consumer Affairs.