Transcript Highlights:

• health records or health claims data, all of that kind of data has been long been protected under HIPAA
• health records or health claims data, all of that kind of data has been long been protected under HIPAA
• health records or health claims data, all of that kind of data has been long been protected under HIPAA
• cycle tracker, for example, which has become been in the Of data has been long been protected under HIPAA

Bills: HF3642, HF2700, HF3615

Keywords: virtual currency, kiosks, prohibition, customer payouts, cryptocurrency regulation, consumer privacy, data privacy, health data, sensitive data, Minnesota Consumer Data Privacy Act, personal data, data broker, targeted advertising, geofencing, location tracking, health care privacy, patient privacy, consent, minor privacy, children's privacy

Summary: The Commerce Finance and Policy Committee met on House File 3642, which would prohibit virtual currency kiosks in Minnesota. The bill was laid over, and the committee adopted a DE1 author’s amendment. Chair Kaggel and Representative Perryman described the measure as a response to widespread scams using crypto kiosks, especially against older adults and other vulnerable people, and said they would continue working with the Department of Commerce and other stakeholders. Testimony from law enforcement and advocates strongly supported the ban. A St. Cloud police sergeant and a Woodbury detective described cases in which victims lost large sums, said the current safeguards and refund rules are being bypassed, and argued that the kiosks are difficult to investigate because funds move quickly and often overseas. An AARP Minnesota volunteer also supported the bill, saying kiosks are a preferred tool for scammers and that existing protections have not kept pace with the problem. The Department of Commerce said it strongly supports the bill and reported that it has received 120 complaints over three years involving nearly $1 million in reported losses, with 2025 the worst year so far. The main opposition came from CoinFlip’s general counsel, who argued that the problem is fraud generally, not kiosks themselves, and said Minnesota already has consumer protections, including refunds for eligible victims. He urged stronger regulation rather than a ban, citing blockchain analytics, hold periods, and 24-hour customer service as alternatives. Committee members then asked questions about how long kiosks have operated in Minnesota, how many there are, who owns them, and the scale of losses; Commerce said there are hundreds statewide, operated by a variety of companies, and that reported losses are likely undercounts.

Bills: SB1540, SB2610, SB2373

Keywords: election officials, confidentiality, personal information, government transparency, public safety, cybersecurity, data breach, breach of system security, exemplary damages, punitive damages, liability shield, safe harbor, small business, mid-sized business, Texas Business & Commerce Code, sensitive personal information, personal identifying information, identity theft, fraud prevention, NIST

Bills: SB58, SB101, SB102

Keywords: parental rights, minor consent, medical consent, mental health services, school counseling, student counseling, parental notification, opt-in, health records, HIPAA, vaccine consent, adolescent health, youth privacy, confidential counseling, school mental health, reproductive health, pregnancy services, sexually transmitted infections, STI treatment, substance abuse treatment

Bills: HB267, HB271, HB267, HB271

Keywords: HB267, Alabama, minor consent, medical consent, mental health, school counseling, parental rights, parental consent, parental access to records, health information, health records, vaccine consent, school mental health services, student counseling, youth healthcare, adolescent health, emancipated minor, pregnancy care, sexually transmitted infections, STI treatment

Bills: S7020, S0308, S0692, S0474, S0572, S1106, S1650, S0350, S1442, S7032

Keywords: open government, sunset review, aquaculture, public records, exemption, Florida Museum of Black History, cultural heritage, education, Board of Directors, local governance, cybersecurity, data breach, data privacy, information security, local government, county, municipality, vendor contracts, third-party service provider, liability shield

Summary: The committee heard and voted on several measures. SB 308 on the Florida Museum of Black History was explained as implementing a prior task force recommendation by designating St. Johns County as the museum site, creating a board, and coordinating with a supporting nonprofit; it passed favorably. SB 692 on cybersecurity standards and liability was amended to bar local governments from imposing cybersecurity requirements on vendors beyond generally accepted best practices, and after testimony both for and against, it was reported favorably as a committee substitute. SB 572 updated ethics law to include legally recognized foster parents and foster children in the definition of relative; after a technical amendment and support from the Ethics Commission, it passed unanimously. SB 1442 revised the long-range program plan to require more specific performance metrics and agency-specific measures; it also passed favorably. The committee also approved SB 1106, as amended by a strike-all, to require state agencies and certain educational materials to use “Judea and Samaria” instead of “West Bank,” despite opposition arguing it would impose political language and conflict with federal and international terminology. SB 7020 reenacted a public records exemption for certain aquaculture and shellfish production records and passed with support from the Department of Agriculture and Consumer Services. SB 474 expanded military leave and related benefits for public employees and officials, including members of the Coast Guard and Florida State Guard, and added three amendments before being reported favorably. SB 350, dealing with public records protections for crime victims and certain law enforcement victims, was heavily amended to add time-limited confidentiality for an officer’s name in some cases and then passed favorably after discussion about balancing transparency and safety. Finally, the committee approved SPB 7032 as a committee bill to shift more fleet management responsibilities from DMS to individual agencies, while still requiring data reporting to DMS for legislative oversight. SB 1650 by Senator Gates was temporarily postponed. At the end of the meeting, members recorded votes on selected bills, and the committee adjourned.

Transcript Highlights:

• 150% of the range, That, but the actual costs are supported because that's what I, in that case, a HIPAA

Bills: SB 30, SB 517, SB 1313, SB 1314, SB 1316, SB 1541, SB 1698, SB 1845, SB 1860, SB 2420, SB 2429

Keywords: gambling, criminal offenses, penalties, defense, electronic devices, tobacco advertising, youth protection, public health, criminal offense, retailer regulation, e-cigarettes, nicotine products, health, public safety, regulation, advertising restrictions, health and safety, elections, election audit, county elections

Summary: The Senate Committee on State Affairs convened to discuss several critical pieces of legislation including SB30 and SB38. Senator Betancourt introduced a committee substitute for SB38 which underwent a smooth adoption process, moving it favorably toward the Senate. The meeting featured a mix of invited testimonies where both proponents and opponents took the floor. One notable highlight included a testimony from Melissa Casey, who criticized the current legal state as prone to fraud and detrimental to both insurers and the public at large, contending that it inflated insurance costs across the board. The discussions delved deeply into the implications of the bills on judicial processes and potential insurance ramifications, with spirited debates surrounding issues of non-economic damages and jury rights. The atmosphere remained engaged as committee members heard varied perspectives on the bills, showcasing a robust democratic process. The meeting underscored the importance of public testimony in shaping legislation, ensuring that multiple voices were considered as the committee pressed on towards making decisions that affect the legal landscape of Texas.

Bills: HB4423, HB3342, HB3645, HB3647, HB3887, HB4430, HB4431, HB2964, HB3834

Keywords: Oklahoma Health Care Authority, Medicaid, immigration verification, healthcare access, federal reporting, health care providers, auditing, patient rights, claims, protection from fraud, audit process, error correction, hospice care, physician determination, healthcare standards, symptom management, health information exchange, all-payer claims database, health care transparency, health care costs

Bills: SB85, SB263, HB277, HB267, SB288, SB85, SB263, HB277, HB267, SB288

Keywords: vaccination exemption, religious exemption, medical exemption, vaccine mandate, testing requirement, public schools, K-12, students, parents, guardians, higher education, college enrollment, university attendance, public institutions of higher education, immunization, religious tenets, sincerely held belief, school health policy, Alabama, AHSAA physical form

Bills: SB61, SB8, SB58, SB60, SB167

Keywords: school psychologist, school psychology, interstate compact, licensure compact, license reciprocity, portable license, equivalent license, professional licensing, psychology board, school mental health, student services, educational services, interstate practice, reciprocal licensing, background check, continuing education, workforce shortage, military spouse, active duty military, compact commission

Bills: SB315, SB584, SB1228, SB1484, SB1860, SB1802

Keywords: DNA privacy, genetic privacy, genetic testing, genetic material, DNA ownership, property right in DNA, genetic consent, biological sample, genomics, genetic data, HIPAA, health information privacy, health care provider, research ethics, human subjects research, law enforcement DNA, forensic DNA, paternity testing, medical examiner, genetic discrimination

Transcript Highlights:

• You kind of went to possibly HIPAA violations in your layout now.
• So that's not... it could be, there could be HIPAA issues there because of...

Bills: SB30, SB517, SB1313, SB1314, SB1316, SB1541, SB1698, SB1845, SB1860, SB2420, SB2429, SB 30

Keywords: gambling, criminal offenses, penalties, defense, electronic devices, tobacco advertising, youth protection, public health, criminal offense, retailer regulation, e-cigarettes, nicotine products, health, public safety, regulation, advertising restrictions, health and safety, elections, election audit, county elections

Bills: SB1969, SB1953, SB1277, SB1287, SB1061, SB1916, SB1589, SB2178, SB1444, SB1438, SB1501, SB1873, SB1364

Keywords: massage therapy, licensing, multistate compact, regulation, healthcare, professionals, Employer Health Plan Transparency Act, health insurance, claims data, contract provisions, health care providers, auditable materials, HIPAA compliance, insurance regulation, unemployment benefits, employment security, work search, job search, reemployment, jobless benefits

Bills: HB2947, HB2964, HB3143, HB3144, HB3342, HB3344, HB3519, HB3522, HB3530, HB3645, HB3647, HB3834, HB4300, HB4422, HB4423

Keywords: behavioral health, Medicaid expansion, clinical interns, mental health services, licensing requirements, medical records, patient rights, privacy, fees, healthcare access, legal claims, medical marijuana, license transfer, Oklahoma Medical Marijuana Authority, moratorium, business regulation, commercial grower licenses, licensing restrictions, agriculture, Medicaid

Transcript Highlights:

• HIPAA reinforces this at the federal level.
• Under HIPAA, protection extends 50 years after death.
• HIPAA sets the floor.
• Some providers are subject to both HIPAA and Part 2.
• Some providers are subject to both HIPAA and Part 2.

Summary: The committee met with Senators Garcia and Simon excused and heard a presentation from FDLE Deputy Commissioner Vaden Pollard on homicide and violent-crime investigations, focusing on access to blood evidence, toxicology, medical records, mental health records, and the legal limits imposed by Florida law, HIPAA, and 42 CFR Part 2. He explained that autopsy evidence collected by medical examiners is generally available to law enforcement, while hospital records and mental health/substance abuse records usually require subpoenas, court orders, or consent, which can delay investigations. He also discussed the difference between DNA testing and toxicology testing, the role of warrants and probable cause for living suspects, and the special rules that apply when a suspect is deceased. Members asked detailed questions about what toxicology panels include, whether medications can be tested for, how medical examiners review prior medical history, and whether FDLE tracks data linking violent crime to mental health issues or follow up with regulators after incidents. Pollard said the agency follows investigative leads where relevant, but regulatory follow-up depends on the circumstances. He also discussed behavioral threat assessment and management, and said risk protection orders have been used effectively to prevent violence and can lead to court-ordered evaluations and services. The committee then shifted to crime lab capacity and turnaround times. Pollard said the average DNA turnaround time was 208 days for some evidence, with anything over 30 days considered backlog, but that sexual assault kits are prioritized and generally handled much faster, with rush cases sometimes completed within 24 hours. Members expressed concern about delays in unsolved violent and sexual assault cases and asked what resources would help reduce backlog; Pollard said additional analysts would improve turnaround times. The meeting concluded with thanks to the presenter and adjournment after Senator Bernard moved to adjourn.

Transcript Highlights:

• HIPAA reinforces this at the federal level.
• Under HIPAA, protection extends 50 years after death.
• HIPAA sets the floor. So if a mirror state law... HIPAA sets the floor.
• The records of most health care providers are subject to HIPAA.
• Some providers are subject to both HIPAA and Part 2.

Summary: The committee convened with a quorum present and heard a presentation from FDLE Deputy Commissioner Vaden Pollard on homicide investigations, blood evidence, toxicology, medical records, and mental health records. Pollard explained that autopsy toxicology and medical examiner records are often critical in death investigations, but access to hospital blood tests, medical records, Baker Act records, and substance abuse treatment records is restricted by Florida law, HIPAA, and 42 CFR Part 2, usually requiring subpoenas, court orders, or consent. He also noted that autopsy reports are generally public, while photographs are confidential, and that medical examiners can access relevant prior medical history of decedents. Members questioned Pollard about what toxicology panels include, whether medications can be tested for, and whether medical examiner reviews can help determine if a deceased person had stopped taking prescribed psychiatric medication. Pollard said toxicology can include alcohol, drugs, and specific medications when relevant, but routine access to living suspects’ medical information is limited. He also discussed FDLE’s behavioral threat assessment work and said investigators may follow leads involving mental health treatment or facility releases when relevant to a case, though he could not speak to regulatory follow-up. The committee also discussed risk protection orders, with Pollard saying FDLE has used them effectively and that they can help prevent violence and connect individuals to services. The discussion then shifted to FDLE laboratory turnaround times and public safety impacts. Pollard said the average DNA turnaround time was 208 days for some cases, while sex assault kits are prioritized and generally remain under 90 days, with rush cases sometimes completed within 24 hours. He said backlog is tied to staffing and analyst capacity, and that faster processing is especially important in unsolved violent and sexual assault cases because delays can leave offenders on the street. The committee also noted that increased toxicology demands would affect toxicology staffing and workload, though not DNA processing. No votes were taken, and the meeting adjourned after the presentation and questions.

Transcript Highlights:

• > that<00:51:42.480> then It's a HIPAA-compliant form that then It's a HIPAA-compliant
• <00:56:56.200> covered<00:56:56.840> entities, are HIPAA covered entities, are HIPAA
• covers the HIPAA components. covers the HIPAA components. >> Follow<00:58:26.000> up.
• the information as if it were HIPAA the information as if it were HIPAA protected,<00:58:45.280>
• <00:59:29.400> Is data at a HIPAA compliance level. Is data at a HIPAA compliance level.

Keywords: 1189, house, all

Summary: The committee first approved the March 20 minutes and then adopted the remainder of the consent calendar, after removing two items for separate discussion. On item 26071, members questioned a $95,000 DoubleTree Manchester contract for a two-day conference. Department staff said the hotel was the only bidder, the conference typically draws more than 500 attendees, most of the cost is food offset by registration fees, and attendees pay their own lodging except for presenters. The committee then approved the item. On item 26068, members asked for clearer reporting on remaining federal funds in continuing items. DHHS said about $10.3 million remained as of February 28, 2026, and agreed to provide the original award amounts and a reconciliation later. The committee approved the item. The committee then took up a DHHS transfer item for the developmental disability system, where officials said projected costs had risen because of delayed pandemic-era billings, new individuals entering the system, and higher individual service budgets. They said the budget was built on older assumptions, that carryforward funds had fallen from about $94 million to $72 million, and that the transfer would not affect lapse because it shifts general funds while federal Medicaid funds are accepted in return. The item was adopted. The committee also approved a hiring request and then a late Corrections item tied to overtime and recruitment. Corrections officials said the department is about 50% staffed for corrections officers, typical overtime is an eight-hour shift, inmate populations are beginning to rise again, and the department is using academy blitzes, out-of-state recruiting, targeted advertising, and a $10,000 sign-on bonus paid after academy completion and one year of service. Senator Gray said the late item was intended to help reduce a larger request expected in June, and the committee adopted the item. Finally, members questioned DHHS item 26074 on the New Hampshire Care Connection system and its interoperability with provider and managed care systems. DHHS said the system already has SMART on FHIR integration, single sign-on, and deeper integration options, and that managed care organizations are working with the contractor on use cases and data exchange. Officials said the project has been multi-phase, including the 988 crisis-response migration, privacy/security work, a provider network of more than 100 organizations, and a searchable resource portal managed by Granite United Way. They said the closed-referral solution is funded largely with Medicaid federal funds and is planned to continue in the base budget, not the rural health grant. The discussion ended without further action noted in the excerpt.

Transcript Highlights:

• More than anything, HIPAA is a security, not a privacy rule.
• HIPAA established the floor of privacy, not the ceiling.
• HIPAA established the floor of privacy, not the ceiling.
• HIPAA established the floor of privacy, not the ceiling.
• HIPAA established the floor of privacy, not the ceiling.

Keywords: 919, house, all

Summary: The committee approved the October 15, 2025 minutes and then held a broader discussion on current challenges with data retention and government transparency. Judy Randall of the Office of the Legislative Auditor said historical data is essential for post-audits, which often look back three to five years, and that retention decisions must balance audit needs with the burden of separating public and nonpublic data. She described the records-retention panel process as informal and largely based on individual judgment, noting she had objected to a proposed 60-day email retention period and generally uses a three-year guideline, though she said that standard is not grounded in a formal rule. Members discussed whether auditing standards should set retention periods, with Randall saying auditing is a good starting point but other offices, including the attorney general, also have needs, and that some agency discretion is unavoidable because of the gray area between official records and non-records. Representative Elkins raised the related principle of data minimization, arguing that government should not keep data longer than needed and citing a University of Minnesota legacy data warehouse breach as an example of the risks of retaining unnecessary sensitive information. Randall agreed that data no longer needed is a liability and said her office purges workpapers after five years. Representative Scott pressed whether three years is enough for fraud investigations and financial records; Randall responded that a reasonableness standard is needed and that longer retention can produce diminishing returns, though she said she would follow up on whether financial records should be treated differently. Tanya Tacker of the Rum River Special Education Cooperative testified in support of updating Minnesota’s data-retention laws for schools. She said districts want to protect student information and maintain transparency, but the current general retention schedule dates to 1985 and 2000 and does not reflect digital records, modern systems, or the volume of special education data. She urged modernizing the schedule, clarifying what must be kept in paper versus digitized form, aligning state rules with IDEA and other federal requirements, and providing practical guidance and tools. Members praised the specificity of her recommendations. Dr. BB Newman testified that retention failures in St. Anthony Village have made it difficult to obtain routine municipal and police data, with records delayed, missing, or inconsistently produced and no clear explanation of what systems were searched or whether records were destroyed. Newman argued these gaps undermine statutory access rights and force residents into costly litigation, and recommended stronger retention auditing, documentation of destruction, mandatory disclosure of systems searched, and consequences for noncompliance. In response to questions, Senate counsel said there is generally no direct penalty, but affected parties may seek mandamus, Data Practices Act claims, or informal mediation/opinions from the Data Practices Office. The discussion closed with calls for clearer standards and possible legislative updates to improve compliance and transparency.

Transcript Highlights:

• other state or local law, no such language exists to account for conflicting federal law, including HIPAA
• In addition to this, HF 16 conflicts with HIPAA, the federal health data privacy act.
• In addition to this, HF 16 conflicts with HIPAA, the federal health data privacy act.
• In addition to this, HF 16 conflicts with HIPAA, the federal health data privacy act.
• In addition to this, HF 16 conflicts with HIPAA, the federal health data privacy act.

Keywords: 919, house, all

Summary: The committee heard testimony on House File 16, and the chair moved the bill with a recommendation that it be re-referred to Elections Finance and Government Operations. Representative Rymer said the bill would require reporting to ICE when an illegal immigrant is arrested on suspicion of a violent crime, even if the county attorney does not prosecute, and would bar state and local entities from blocking federal immigration enforcement. He described the bill as narrowly focused on serious offenses such as murder, assault, robbery, kidnapping, and criminal sexual conduct, and said it was intended to improve communication with federal authorities about dangerous offenders. Supporters argued the bill would improve public safety and cooperation with federal law enforcement. David Zimmer, a former local law enforcement official, said cooperation with ICE is consistent with law enforcement practice and helps with information-sharing, warrants, consulate notifications, and locating individuals. Several other supporters, including a crime victim family member and a security officer, said the bill would help identify dangerous criminals and protect communities. Opponents said the bill would reduce trust in local law enforcement and discourage victims and witnesses from reporting crimes. Testifiers from the Immigrant Law Center of Minnesota, The Advocates for Human Rights, Violence Free Minnesota, the Minnesota Council on Latino Affairs, the Northstar Alliance, the City of Minneapolis, and others said mandatory ICE notification could deter domestic violence and trafficking victims from seeking help, harm due process, and undermine community safety. Some also warned it would interfere with local separation policies, burden local agencies, and have negative economic and civil rights impacts. The committee also heard emotional testimony from individuals describing domestic abuse and immigration-related fears, and from family members of a murder victim who supported the bill.

Transcript Highlights:

• Of these facilities require now, which is a HIPAA release. Thank you. I see no further questions.
• So we go through rigorous steps to make sure that we're complying with HIPAA and state privacy laws.
• of concerns that I have that I find inconsistent with HIPAA.
• state law than they are under HIPAA.
• So basically, we would have to defer to HIPAA and say, well, HIPAA is going to say that we're going to

Summary: The committee took up a large health policy agenda. SB 1568 on electronic prescribing was explained as a federal conformity measure, but members raised concerns about preserving patients’ ability to obtain paper prescriptions and about exemptions for emergency, hospice, and other situations. Emergency physicians testified in support of e-prescribing but asked for flexibility, and the bill was reported favorably despite Senator Harrell’s opposition. SB 1606 on patient access to records sought to standardize record-production timelines and require electronic delivery when available; after an amendment correcting a drafting error, the bill drew concerns about HIPAA, behavioral health confidentiality, and the distinction between personal and legal representatives, and it was reported unfavorably as a committee substitute. The committee then approved SB 1346 on fentanyl testing, with a technical amendment, to require hospitals and campus emergency departments to test for fentanyl in urine testing for suspected overdose or poisoning. SB 1224 on administration of controlled substances by paramedics was amended to clarify language and reported favorably. SB 656 on health care billing and collection activities was substantially revised by strike-all amendment to allow sale of medical debt to third parties under new limits, including no interest or fees and return of debt if charity care applies; it was reported favorably as a committee substitute. SB 68 expanded health facilities authority financing to include not-for-profit LLCs and parent companies, and SB 524 added Duchenne muscular dystrophy to the newborn screening panel; both were reported favorably. Later, the committee approved SB 1842 on out-of-network referrals after multiple amendments, requiring providers to verify network participation at the point of service and notify patients in writing, though several members and physicians warned it could burden providers and increase workload. The committee also advanced proposed committee bill SB 7028, which revises the Casey DeSantis Cancer Research Program, adds oversight and reporting requirements, creates a pediatric cancer research incubator, and establishes the Bascom-Palmer VisionGen initiative; cancer center representatives testified in strong support, and the bill was reported favorably as a committee bill. SB 172 on specialty titles and designations was amended to clarify enforcement and was reported favorably after supporters said it would prevent misleading use of specialist titles, while opponents argued it could confuse practitioners’ titles. Finally, SB 1690 on surrendered infants was reported favorably after supporters said it would codify and expand safe-haven baby box procedures and opponents raised safety concerns about the devices. The committee also noted SB 1606 remained pending for reconsideration next week before adjourning.

Transcript Highlights:

• We also have some HIPAA issues with it.
• So HIPAA compliance is not negotiable, right?
• Care to comment on HIPAA compliance within the system? We know it's a problem.
• Care to comment on HIPAA compliance within the system? We know it's a problem.
• Fix the small or huge issues like HIPAA. And that was more of my question.

Summary: The subcommittee heard a lengthy presentation on the Agency for Persons with Disabilities’ I-Connect system, based on an ILAB assessment of the platform’s performance and requirements. ILAB said the system provides useful centralized records, reporting, compliance support, and audit trails, but users described it as cumbersome, outdated, and inefficient, with excessive manual entry, weak navigation, limited notifications, no mobile app, poor printing/export options, and performance issues. ILAB also said the original 2013-era requirements were too high-level and that only a portion of the requirements could be verified, with some features de-scoped or never implemented. Their recommendations included better integration with electronic health record systems, improved performance monitoring, electronic signatures, OCR, and more modern export and verification tools. Public testimony from providers and advocates echoed those concerns. A support coordination provider said the system is nicknamed “I Disconnect,” described problems with EVV/GPS sign-ins, lengthy support plans, lack of a phone app, and possible HIPAA concerns. Another advocate said the system should have preserved family access to records and criticized the need for providers to use workarounds and additional software. APD staff said the agency has spent about $19.7 million through FY 2023-24, has regular build updates under the current contract with WellSky, and uses an internal help desk and vendor ticketing process to triage bugs versus enhancement requests. They said some issues are handled case-by-case, critical tickets have SLAs, and the agency is working on interoperability and other requested improvements. Members questioned whether the system should be fixed or replaced, whether the original contract and SaaS arrangement were sufficient, and whether the state received value for the money spent. APD said the system went live in phases and that all functionality was in place by June 2024, while ILAB and members noted significant technical debt and unresolved gaps. The committee also discussed record retention, provider access to records after a consumer changes providers, and whether federal funding or compliance could be affected. The meeting ended with broader budget remarks emphasizing completion over expansion, stronger upfront planning for technology projects, and more accountability before funding new systems or major enhancements.