AB133-SSA1-SA1,299,8 " Section 2280p. 153.50 (6) of the statutes is renumbered 153.50 (6) (a).

AB133-SSA1-SA1, s. 2280q Section 2280q. 153.50 (6) (b), (c), (d) and (e) of the statutes are created to read:

AB133-SSA1-SA1,299,12 153.50 (6) (b) The department may not require under this chapter a health care provider that is a hospital or ambulatory surgery center to submit uniform patient billing forms.

AB133-SSA1-SA1,299,15 (c) A health care provider that is not a hospital or ambulatory surgery center may not submit any of the following to the department under the requirements of this chapter:

AB133-SSA1-SA1,299,16 1. The data elements specified under sub. (3) (b).

AB133-SSA1-SA1,299,17 2. The patient's telephone number.

AB133-SSA1-SA1,299,18 3. The insured's employer's name or school name.

AB133-SSA1-SA1,299,20 4. Data regarding insureds other than the patient, other than the payer category code under sub. (3m).

AB133-SSA1-SA1,299,21 5. The patient's employer's name or school name.

AB133-SSA1-SA1,299,22 6. The patient's relationship to the insured.

AB133-SSA1-SA1,299,23 7. The insured's identification number.

AB133-SSA1-SA1,299,24 8. The insured's policy or group number.

AB133-SSA1-SA1,300,1 9. The insured's date of birth or sex.

AB133-SSA1-SA1,300,2 10. The patient's marital, employment or student status.

AB133-SSA1-SA1,300,6 (d) If a health care provider that is not a hospital or ambulatory surgery center submits a data element that is specified in par. (c) 1. to 10., the department shall immediately return this information to the health care provider or, if discovered later, shall remove and destroy the information.

AB133-SSA1-SA1,300,8 (e) A health care provider may not submit information that uses any of the following as a patient account number:

AB133-SSA1-SA1,300,10 1. The patient's social security number or any substantial portion of the patient's social security number.

AB133-SSA1-SA1,300,11 2. A number that is related to another patient identifying number.

AB133-SSA1-SA1, s. 2280r Section 2280r. 153.55 of the statutes is amended to read:

AB133-SSA1-SA1,300,15 153.55 Protection of health care provider confidentiality. Health care provider-identifiable data Data obtained under this chapter is not subject to inspection, copying or receipt under s. 19.35 (1).".

AB133-SSA1-SA1,300,16 960. Page 1172, line 14: after that line insert:

AB133-SSA1-SA1,300,17 " Section 2283g. 153.67 of the statutes is created to read:

AB133-SSA1-SA1,300,23 153.67 Independent review board. The independent review board shall review any request under s. 153.45 (1) (c) for data elements other than those available for public use data files under s. 153.45 (1) (b). Unless the independent review board approves such a request or unless independent review board approval is not required under rules of the department promulgated under s. 153.45 (1) (c) (intro.), the data elements requested may not be released.

AB133-SSA1-SA1, s. 2283h Section 2283h. 153.76 of the statutes is created to read:

AB133-SSA1-SA1,301,4 153.76 Rule-making by the independent review board. Notwithstanding s. 15.01 (1r), the independent review board may promulgate only those rules that are first reviewed and approved by the board on health care information.

AB133-SSA1-SA1, s. 2283i Section 2283i. 153.85 of the statutes is amended to read:

AB133-SSA1-SA1,301,9 153.85 Civil liability. Any Except as provided in s. 153.86, any person violating s. 153.50 or rules promulgated under s. 153.75 (1) (a) is liable to the patient for actual damages and costs, plus exemplary damages of up to $1,000 for a negligent violation and up to $5,000 for an intentional violation.

AB133-SSA1-SA1, s. 2283j Section 2283j. 153.86 of the statutes is created to read:

AB133-SSA1-SA1,301,16 153.86 Immunity from liability. A health care provider that submits information to the department under this chapter is immune from civil liability for any act or omission of an employe, official or agent of the health care provider that results in the release of a prohibited data element while submitting data to the department of health and family services. The immunity provided under this section does not apply to intentional, wilful or reckless acts or omissions.