SB315-AA28,3,3
1(a) Aggregate any data element category containing small numbers, using
2procedures that are developed by the department and approved by the board and
3that follow commonly accepted statistical methodology.
SB315-AA28,3,64
(b) Remove and destroy all of the following data elements on the uniform
5patient billing forms that are received by the department under the requirements of
6this chapter:
SB315-AA28,3,77
1. The patient's name and street address.
SB315-AA28,3,88
2. The insured's name, address and telephone number.
SB315-AA28,3,99
3. Any other insured's name, employer name and date of birth.
SB315-AA28,3,1010
4. The signature of the patient or other authorized signature.
SB315-AA28,3,1111
5. The signature of the insured or other authorized signature.
SB315-AA28,3,1212
6. The signature of the physician.
SB315-AA28,3,14
13(4) Release of patient-identifiable data. Under the procedures specified in
14sub. (5), release of patient-identifiable data may be made to any of the following:
SB315-AA28,3,1615
(a) The patient or a person granted permission in writing by the patient for
16release of the patient's patient-identifiable data.
SB315-AA28,3,1917
(b) An agent of the department who is responsible for the patient-identifiable
18data in the department, in order to store the data and ensure the accuracy of the
19information in the data base of the department.
SB315-AA28,3,2120
(c) A health care provider or the agent of a health care provider, to ensure the
21accuracy of the information in the data base of the department.
SB315-AA28,3,2322
(d) The department, for purposes of epidemiological investigation or to
23eliminate the need for duplicative data bases.
SB315-AA28,4,3
1(e) An entity that is required by federal or state statute to obtain
2patient-identifiable data for purposes of epidemiological investigation or to
3eliminate the need for duplicative data bases.
SB315-AA28,4,8
4(5) Procedures for release of patient-identifiable data. (a) The department
5may not release or provide access to patient-identifiable data to a person authorized
6under sub. (4) (a), (c), (d) or (e) unless the authorized person requests the department,
7in writing, to release the patient-identifiable data. The request shall include all of
8the following:
SB315-AA28,4,99
1. The requester's name and address.
SB315-AA28,4,1010
2. The reason for the request.
SB315-AA28,4,1311
3. For a person who is authorized under sub. (4) (a), (c) or (d) to receive or have
12access to patient-identifiable data, evidence, in writing, that indicates that
13authorization.
SB315-AA28,4,1514
4. For an entity that is authorized under sub. (4) (e) to receive or have access
15to patient-identifiable data, evidence, in writing, of all of the following:
SB315-AA28,4,1716
a. The federal or state statutory requirement to obtain the patient-identifiable
17data.
SB315-AA28,4,2218
b. Any federal or state statutory requirement to uphold the patient
19confidentiality provisions of this chapter or patient confidentiality provisions that
20are more restrictive than those of this chapter; or, if the latter evidence is
21inapplicable, an agreement, in writing, to uphold the patient confidentiality
22provisions of this chapter.
SB315-AA28,4,2523
(b) Upon receipt of a request under par. (a), the department shall, as soon as
24practicable, comply with the request or notify the requester, in writing, of all of the
25following:
SB315-AA28,5,1
11. That the department is denying the request in whole or in part.
SB315-AA28,5,22
2. The reason for the denial.
SB315-AA28,5,43
3. For a person who believes that he or she is authorized under sub. (4), the
4action provided under s. 19.37.
SB315-AA28,5,8
6153.55 Protection of health care provider confidentiality. Health care
7provider-identifiable data obtained under this chapter is not subject to inspection,
8copying or receipt under s. 19.35 (1).".
