This bill establishes regulations regarding the purchase or collection of health information by public agencies in Iowa. It specifically prohibits public agencies from obtaining health information from entities that are not governed by the federal Health Insurance Portability and Accountability Act (HIPAA) of 1996. This restriction applies regardless of whether the entity has obtained consent from individuals to share their health information.

Additionally, the bill provides definitions for key terms, including "health information" and "public agency," aligning them with existing legal definitions. The intent of the legislation is to enhance the protection of consumer health information by ensuring that public agencies only engage with entities that adhere to HIPAA regulations, thereby safeguarding individuals' privacy rights.