Requires that a contract between an insurer and a hospital shall include a provision that provides for medical records requested by the insurer or its utilization review agent to be made available electronically by the hospital; limits the use of disclosed records.
S08203 would require hospitals that participate in a health plan network to share requested medical records electronically with insurers, health care plans, and their utilization review agents for purposes of utilization review. The bill amends both the Insurance Law and Public Health Law to require these electronic-record provisions to be included in contracts between hospitals and insurers, corporations, and health care plans, and it applies to hospitals participating in network arrangements. It also directs that records be shared in a timely manner and, where requested for utilization review, be provided electronically rather than through paper-based transmission.
The bill also places limits on how disclosed records may be used. It states that records shared under the new subdivision may be used only for individual claim review and adjudication and to promote patient privacy, and not for auditing or detecting historical billing patterns or abuse. It further provides that the entire medical record should be available, without excluding admission, discharge, or treatment information, and bars health plans from seeking additional information if it is already available in the electronic record. The bill defines “health care plan” broadly to include HMOs, insurers, Article 43 corporations, municipal cooperative health benefit plans, and student health plans.
If enacted, the bill would amend Insurance Law sections 3217-b, 4325, and 4905, and Public Health Law section 4406-c and section 2803, creating a new statewide requirement for electronic medical-record sharing in hospital network contracts. It would affect hospitals, insurers, health care plans, and utilization review agents by standardizing how records are requested and transmitted for medical necessity and coverage determinations. The bill also imposes data-security and interoperability expectations, including safeguarding protected health information and, where feasible and necessary, seeking HITRUST certification.
The available context shows no recorded committee transcript or vote history, so there is no documented floor or committee debate to gauge partisan or stakeholder sentiment. Based on the bill text, the measure appears aimed at improving efficiency in utilization review and reducing administrative friction by requiring electronic access to records. The overall framing is procedural and operational rather than ideological, suggesting a technocratic approach to health insurance administration.
The main points of potential contention are likely to be privacy, scope of access, and administrative burden. The bill requires access to the entire medical record for utilization review and prohibits plans from requesting additional information if it is already in the electronic record, which may concern providers and privacy advocates. At the same time, insurers and utilization review agents may support the measure because it expands direct electronic access and standardizes record production, while hospitals may be concerned about implementation costs, interoperability requirements, and contract renegotiation. The bill also limits use of records to claim review and adjudication, which reflects an attempt to address privacy concerns while still broadening access.