Amendment AA3-SB369

LRBa5226/1

DAK:kmg&kaf:dw

1995 - 1996 LEGISLATURE

ASSEMBLY AMENDMENT 3, To 1995 SENATE BILL 369

May 8, 1996 - Offered by Representative Schneider.

SB369-AA3,1,2 At the locations indicated, amend the bill, as shown by senate substitute amendment 1, as follows:

SB369-AA3,1,4 1. Page 1, line 3: after "council" insert: ", limiting the use of social security numbers in health care data collection".

SB369-AA3,1,6 2. Page 2, line 13: after "programs" insert: ", the maintenance of privacy of individuals in health care data collection programs".

SB369-AA3,1,7 3. Page 2, line 25: after that line insert:

SB369-AA3,1,13 "(2m) Restriction. The interagency coordinating council or any subcommittee of the interagency coordinating council may not recommend that an individual be required or requested to divulge his or her social security number for use as a personal identifier unless the council or subcommittee also recommends methods by which the confidentiality of social security numbers collected under its recommendations are protected as required under s. 153.55.".

SB369-AA3,1,14 4. Page 3, line 8: after that line insert:

SB369-AA3,1,15 " Section 3g. 153.01 (1) of the statutes is renumbered 153.01 (1m).

SB369-AA3, s. 3m Section 3m. 153.01 (1) of the statutes is created to read:

SB369-AA3,2,4 153.01 (1) "Agency" means a state board, commission, committee, council or department or a unit of the state board, commission, committee, council or department that is created by the constitution or a statute.

SB369-AA3, s. 3r Section 3r. 153.55 of the statutes is created to read:

SB369-AA3,2,11 153.55 Social security numbers. An agency may not request or require an individual to divulge his or her social security number for the purposes of health care data collection, maintenance, dissemination or exchange unless the agency has implemented the following actions to protect the confidentiality of social security numbers contained in any computerized health care data collected, maintained, disseminated or exchanged by the agency:

SB369-AA3,2,12 (1) A system of encrypting the social security numbers.

SB369-AA3,2,15 (2) Another system of protecting the social security numbers from unauthorized access, using computer hardware and software security protections and related policies, which is in addition to the system under sub. (1).".

SB369-AA3,2,16 5. Page 4, line 17: after that line insert:

SB369-AA3,2,18 "5.  Maintenance of the privacy of individuals in health care data collection and dissemination.

SB369-AA3,3,2 (am)  The joint legislative council or any subcommittee of the joint legislative council may not recommend, under the study under this subsection, that an individual be required or requested to divulge his or her social security number for use as a personal identifier unless the joint legislative council or subcommittee also recommends methods by which the confidentiality of social security numbers collected by the public or private sector pursuant to its recommendations can be protected as described in section 153.55 of the statutes, as created by this act.".

SB369-AA3,3,3 (End)