Minors; parental access to health records.
HB2399 amends Virginia’s health records privacy law to expand and clarify parental access to a minor’s health records when those records are made available through a secure website. Under the bill, health care entities that provide minors’ records online must also make those records available to the minor’s parent or guardian through the same secure website, unless doing so would violate existing exceptions in state law governing minors’ consent and confidentiality. The bill is framed as a targeted change to the state’s health records privacy statute rather than a broad rewrite of medical privacy law.
The measure also makes related conforming and clarifying changes within the same statute governing disclosure, authorization, subpoenas, electronic access, and exceptions for sensitive records. It preserves the existing framework for when health records may be disclosed, including protections for psychotherapy notes, substance abuse records, and other categories already governed by state or federal law. The bill’s practical effect is to require health systems and other covered entities that use patient portals or similar secure websites to extend online access to parents or guardians of minors, subject to the same legal limits that already apply to minor confidentiality.
In terms of state law, HB2399 would directly amend § 32.1-127.1:03 of the Code of Virginia, the main health records privacy statute. It would affect health care providers, health plans, health care clearinghouses, and any entity that offers secure online access to records. It also interacts with existing laws on minors’ consent to treatment, parental authority, and exceptions for certain sensitive services, meaning providers would need to reconcile portal access practices with current confidentiality rules for minors.
The general sentiment reflected in the committee votes was favorable but not unanimous. The bill advanced out of subcommittee 7-0 and then was reported from the House Health and Human Services Committee by a 13-8 vote, indicating majority support but meaningful opposition. The lack of transcript material limits insight into the exact arguments, but the vote pattern suggests the bill was viewed positively by supporters as a parental access measure while still raising privacy concerns for some members.
The main point of contention is the balance between parental access and minor privacy. Supporters are likely to view the bill as improving family involvement, transparency, and access to medical information, especially through modern patient portals. Opponents or skeptics are likely concerned that automatic online access could undermine confidentiality for minors in situations where state law allows them to consent to certain care on their own, particularly for sensitive health services. The bill’s exception language attempts to preserve those protections, but that tension appears to be the central issue.
HB2399 would amend Virginia Code § 32.1-127.1:03, the state’s health records privacy law, by adding a requirement that health care entities offering minors’ records through a secure website also provide that access to a minor’s parent or guardian, unless doing so would conflict with existing legal protections for minors’ confidential care. The bill would affect how providers, health plans, and health information systems manage portal access and disclosure practices, while leaving intact the broader statutory framework governing health record privacy, subpoenas, authorization, and special protections for psychotherapy notes and other sensitive records.
The bill appears to have received generally favorable treatment in committee, but with notable dissent. It passed subcommittee unanimously and was reported from the House Health and Human Services Committee on a 13-8 vote, suggesting majority support for the policy goal of parental access but enough concern to produce a divided committee. With no transcript available, the recorded votes are the main indicator of sentiment, and they show support tempered by privacy-related reservations.
The central contention is whether expanding portal access for parents and guardians improves family involvement or risks exposing minors’ confidential health information. Supporters likely emphasize parental oversight and easier access to records in a digital health system, while opponents are likely focused on preserving minors’ ability to receive certain services confidentially under existing Virginia law. The bill tries to resolve that tension by carving out cases where parental access would violate subsection F or § 54.1-2969, but that exception-based approach is also where implementation concerns may arise for providers.