AB133-ASA1-AA2,353,6 6" Section 2278rm. 150.84 (2) of the statutes is amended to read:
AB133-ASA1-AA2,353,127 150.84 (2) "Health care facility" means a facility, as defined in s. 647.01 (4), or
8any hospital, nursing home, community-based residential facility, county home,
9county infirmary, county hospital, county mental health center, tuberculosis
10sanatorium
or other place licensed or approved by the department under s. 49.70,
1149.71, 49.72, 50.02, 50.03, 50.35, 51.08, or 51.09, 58.06, 252.073 or 252.076 or a
12facility under s. 45.365, 51.05, 51.06, 233.40, 233.41, 233.42 or 252.10.".
AB133-ASA1-AA2,353,13 13865. Page 1170, line 18: after that line insert:
AB133-ASA1-AA2,353,15 14" Section 2280b. 153.45 (1) (b) of the statutes is renumbered 153.45 (1) (b) 1.
15and amended to read:
AB133-ASA1-AA2,353,2216 153.45 (1) (b) 1. Public For information that is submitted by hospitals or
17ambulatory surgery centers, public
use data files which that do not permit the
18identification of specific patients, employers or health care providers, as defined by
19rules promulgated by the department. The identification of these groups patients,
20employers or health care providers
shall be protected by all necessary means,
21including the deletion of patient identifiers and the use of calculated variables and
22aggregated variables.
AB133-ASA1-AA2, s. 2280c 23Section 2280c. 153.45 (1) (b) 2. of the statutes is created to read:
AB133-ASA1-AA2,354,12
1153.45 (1) (b) 2. For information that is submitted by health care providers
2other than hospitals or ambulatory surgery centers, public use data files that do not
3permit the identification of specific patients, employers or health care providers, as
4defined by rules promulgated by the department. The identification of patients,
5employers or health care providers shall be protected by all necessary means,
6including the deletion of patient identifiers; the use of calculated variables and
7aggregated variables; the specification of counties as to residence, rather than zip
8codes; the use of 5-year categories for age, rather than exact age; not releasing
9information concerning a patient's race or ethnicity or dates of admission, discharge,
10procedures or visits; and masking sensitive diagnoses and procedures by use of
11larger diagnostic and procedure categories. Public use data files under this
12subdivision may include only the following:
AB133-ASA1-AA2,354,1313 a. The patient's county of residence.
AB133-ASA1-AA2,354,1414 b. The payment source, by type.
AB133-ASA1-AA2,354,1615 c. The patient's age category, by 5-year intervals up to age 80 and a category
16of 80 years or older.
AB133-ASA1-AA2,354,1717 d. The patient's procedure code.
AB133-ASA1-AA2,354,1818 e. The patient's diagnosis code.
AB133-ASA1-AA2,354,1919 f. Charges assessed with respect to the procedure code.
AB133-ASA1-AA2,354,2120 g. The name and address of the facility in which the patient's services were
21rendered.
AB133-ASA1-AA2,354,2222 h. The patient's sex.
AB133-ASA1-AA2,355,223 i. Information that contains the name of a health care provider that is not a
24hospital or ambulatory surgery center, if the privacy institutional review board first
25reviews and approves the release or if the department promulgates rules that specify

1circumstances under which the privacy institutional review board need not review
2and approve the release.
AB133-ASA1-AA2,355,33 j. Calendar quarters of service.
AB133-ASA1-AA2,355,54 k. Information other than patient-identifiable data, as defined in s. 153.50 (1)
5(b), as approved by the privacy institutional review board.
AB133-ASA1-AA2, s. 2280d 6Section 2280d. 153.45 (1) (b) 3. of the statutes is created to read:
AB133-ASA1-AA2,355,107 153.45 (1) (b) 3. Public use data files that specify calendar quarters of service,
8rather than date of service, except if the department specifies by rule that the
9number of data elements included in the public use data file is too small to enable
10protection of patient confidentiality.
AB133-ASA1-AA2, s. 2280e 11Section 2280e. 153.45 (1) (c) of the statutes is renumbered 153.45 (1) (c)
12(intro.) and amended to read:
AB133-ASA1-AA2,355,2413 153.45 (1) (c) (intro.) Custom-designed reports containing portions of the data
14under par. (b). Of information submitted by health care providers that are not
15hospitals or ambulatory surgery centers, requests under this paragraph for data
16elements other than those available for public use data files under par. (b) 2.,
17including the patient's month and year of birth, require review and approval by the
18privacy institutional review board before the data elements may be released.
19Information that contains the name of a health care provider that is not a hospital
20or ambulatory surgery center may be released only if the privacy institutional review
21board first reviews and approves the release or if the department promulgates rules
22that specify circumstances under which the privacy institutional review board need
23not review and approve the release. Reports under this paragraph may include the
24patient's zip code only if at least one of the following applies:
AB133-ASA1-AA2, s. 2280f 25Section 2280f. 153.45 (1) (c) 1. to 4. of the statutes are created to read:
AB133-ASA1-AA2,356,1
1153.45 (1) (c) 1. Other potentially identifying data elements are not released.
AB133-ASA1-AA2,356,22 2. Population density is sufficient to mask patient identity.
AB133-ASA1-AA2,356,43 3. Other potentially identifying data elements are grouped to provide
4population density sufficient to protect identity.
AB133-ASA1-AA2,356,55 4. Multiple years of data elements are added to protect identity.
AB133-ASA1-AA2, s. 2280g 6Section 2280g. 153.45 (6) of the statutes is created to read:
AB133-ASA1-AA2,356,107 153.45 (6) The department may not sell or distribute data bases of information,
8from health care providers who are not hospitals or ambulatory surgery centers, that
9are able to be linked with public use data files, unless first approved by the privacy
10institutional review board.
AB133-ASA1-AA2, s. 2280ge 11Section 2280ge. 153.50 (1) (a) of the statutes is renumbered 153.01 (2m).
AB133-ASA1-AA2, s. 2280gg 12Section 2280gg. 153.50 (1) (b) of the statutes is renumbered 153.50 (1) (b) 1.,
13and 153.50 (1) (b) 1. (intro.), b., c., i. and j., as renumbered, are amended to read:
AB133-ASA1-AA2,356,1614 153.50 (1) (b) 1. (intro.) "Patient-identifiable data", for information submitted
15by hospitals and ambulatory surgery centers,
means all of the following data
16elements:
AB133-ASA1-AA2,356,1717 b. Patient control or account number.
AB133-ASA1-AA2,356,1818 c. Patient date of birth age category.
AB133-ASA1-AA2,356,1919 i. Patient's employer's name or school name.
AB133-ASA1-AA2,356,2020 j. Insured's sex and date of birth.
AB133-ASA1-AA2, s. 2280gm 21Section 2280gm. 153.50 (1) (b) 2. of the statutes is created to read:
AB133-ASA1-AA2,356,2422 153.50 (1) (b) 2. "Patient-identifiable data", for information submitted by
23health care providers who are not hospitals or ambulatory surgery centers, means
24all of the following data elements:
AB133-ASA1-AA2,356,2525 a. Data elements specified in subd. 1. a. to g.
AB133-ASA1-AA2,357,2
1b. Whether the patient's condition is related to employment, and occurrence
2and place of an auto accident or other accident.
AB133-ASA1-AA2,357,43 c. Date of first symptom of current illness, of current injury or of current
4pregnancy.
AB133-ASA1-AA2,357,55 d. First date of patient's same or similar illness, if any.
AB133-ASA1-AA2,357,76 e. Dates that the patient has been unable to work in his or her current
7occupation.
AB133-ASA1-AA2,357,88 f. Dates of receipt by patient of medical service.
AB133-ASA1-AA2,357,99 g. The patient's city, town or village.
AB133-ASA1-AA2, s. 2280h 10Section 2280h. 153.50 (2) of the statutes is repealed.
AB133-ASA1-AA2, s. 2280i 11Section 2280i. 153.50 (3) (b) 7. of the statutes is created to read:
AB133-ASA1-AA2,357,1312 153.50 (3) (b) 7. The patient's account number, after use only as verification of
13data by the department.
AB133-ASA1-AA2, s. 2280j 14Section 2280j. 153.50 (3) (c) of the statutes is created to read:
AB133-ASA1-AA2,357,1815 153.50 (3) (c) Develop, for use by purchasers of data under this chapter, a data
16use agreement that specifies data use restrictions, appropriate uses of data and
17penalties for misuse of data, and notify prospective and current purchasers of data
18of the appropriate uses.
AB133-ASA1-AA2, s. 2280k 19Section 2280k. 153.50 (3) (d) of the statutes is created to read:
AB133-ASA1-AA2,357,2120 153.50 (3) (d) Require that a purchaser of data under this chapter sign and have
21notarized the data use agreement of the department specified in par. (c).
AB133-ASA1-AA2, s. 2280km 22Section 2280km. 153.50 (3m) of the statutes is created to read:
AB133-ASA1-AA2,358,223 153.50 (3m) Healthcare provider measures to ensure patient identity
24protection.
A health care provider that is not a hospital or ambulatory surgery
25center shall, before submitting information required by the department under this

1chapter, convert to a payer category code as specified by the department any names
2of an insured's payer or other insured's payer.
AB133-ASA1-AA2, s. 2280kp 3Section 2280kp. 153.50 (4) (intro.) of the statutes is renumbered 153.50 (4)
4(a) (intro.) and amended to read:
AB133-ASA1-AA2,358,75 153.50 (4) (a) (intro.) Under Except as specified in par. (b), under the
6procedures specified in sub. (5), release of patient-identifiable data may be made
7only to any of the following:
AB133-ASA1-AA2, s. 2280kq 8Section 2280kq. 153.50 (4) (a) of the statutes is repealed.
AB133-ASA1-AA2, s. 2280kr 9Section 2280kr. 153.50 (4) (b) to (e) of the statutes are renumbered 153.50 (4)
10(a) 1. to 4.
AB133-ASA1-AA2, s. 2280ks 11Section 2280ks. 153.50 (4) (b) of the statutes is created to read:
AB133-ASA1-AA2,358,1512 153.50 (4) (b) Of information submitted by health care providers that are not
13hospitals or ambulatory surgery centers, patient-identifiable data that contains a
14patient's date of birth may be released under this subsection only under
15circumstances as specified by rule by the department.
AB133-ASA1-AA2, s. 2280ku 16Section 2280ku. 153.50 (5) (a) (intro.) of the statutes is amended to read:
AB133-ASA1-AA2,358,2017 153.50 (5) (a) (intro.) The department may not release or provide access to
18patient-identifiable data to a person authorized under sub. (4) (a) , (c), (d) or (e)
19unless the authorized person requests the department, in writing, to release the
20patient-identifiable data. The request shall include all of the following:
AB133-ASA1-AA2, s. 2280kv 21Section 2280kv. 153.50 (5) (a) 3. of the statutes is amended to read:
AB133-ASA1-AA2,358,2422 153.50 (5) (a) 3. For a person who is authorized under sub. (4) (a), (c) or (d) to
23receive or have access to patient-identifiable data, evidence, in writing, that
24indicates that authorization.
AB133-ASA1-AA2, s. 2280kw 25Section 2280kw. 153.50 (5) (a) 4. (intro.) of the statutes is amended to read:
AB133-ASA1-AA2,359,3
1153.50 (5) (a) 4. (intro.) For an entity that is authorized under sub. (4) (e) (a)
24.
to receive or have access to patient-identifiable data, evidence, in writing, of all
3of the following:
AB133-ASA1-AA2, s. 2280kx 4Section 2280kx. 153.50 (5) (b) 3. of the statutes is amended to read:
AB133-ASA1-AA2,359,65 153.50 (5) (b) 3. For a person who believes that he or she is authorized under
6sub. (4) (a), the action provided under s. 19.37.".
AB133-ASA1-AA2,359,7 7866. Page 1170, line 22: after that line insert:
AB133-ASA1-AA2,359,8 8" Section 2280p. 153.50 (6) of the statutes is renumbered 153.50 (6) (a).
AB133-ASA1-AA2, s. 2280q 9Section 2280q. 153.50 (6) (b), (c), (d) and (e) of the statutes are created to read:
AB133-ASA1-AA2,359,1210 153.50 (6) (b) The department may not require under this chapter a health care
11provider that is a hospital or ambulatory surgery center to submit uniform patient
12billing forms.
AB133-ASA1-AA2,359,1513 (c) A health care provider that is not a hospital or ambulatory surgery center
14may not submit any of the following to the department under the requirements of
15this chapter:
AB133-ASA1-AA2,359,1616 1. The data elements specified under sub. (3) (b).
AB133-ASA1-AA2,359,1717 2. The patient's telephone number.
AB133-ASA1-AA2,359,1818 3. The insured's employer's name or school name.
AB133-ASA1-AA2,359,2019 4. Data regarding insureds other than the patient, other than the name of the
20insured's payer or other insured's payer.
AB133-ASA1-AA2,359,2121 5. The patient's employer's name or school name.
AB133-ASA1-AA2,359,2222 6. The patient's relationship to the insured.
AB133-ASA1-AA2,359,2323 7. The insured's identification number.
AB133-ASA1-AA2,359,2424 8. The insured's policy or group number.
AB133-ASA1-AA2,360,1
19. The insured's date of birth or sex.
AB133-ASA1-AA2,360,22 10. The patient's marital, employment or student status.
AB133-ASA1-AA2,360,63 (d) If a health care provider that is not a hospital or ambulatory surgery center
4submits a data element that is specified in par. (c) 1. to 10., the department shall
5immediately return this information to the health care provider or, if discovered
6later, shall remove and destroy the information.
AB133-ASA1-AA2,360,87 (e) A health care provider may not submit information that uses any of the
8following as a patient account number:
AB133-ASA1-AA2,360,109 1. The patient's social security number or any substantial portion of the
10patient's social security number.
AB133-ASA1-AA2,360,1111 2. A number that is related to another patient identifying number.
AB133-ASA1-AA2, s. 2280r 12Section 2280r. 153.55 of the statutes is amended to read:
AB133-ASA1-AA2,360,15 13153.55 Protection of health care provider confidentiality. Health care
14provider-identifiable data
Data obtained under this chapter is not subject to
15inspection, copying or receipt under s. 19.35 (1).".
Loading...
Loading...