The proposed bill introduces the "Public Health Data Privacy and Protection Act" as a new chapter in Title 23 of the General Laws, focusing on the confidentiality and management of reportable disease data held by the Rhode Island Department of Health. It defines key terms such as "de-identified data," "line-level data," and "public health purpose." The bill establishes that all reportable disease data, including line-level data, is confidential and not considered a public record. It outlines the authority of the Department of Health in determining access to this data and specifies the conditions under which de-identified data may be released for public health purposes, including sharing with other local, state, tribal, territorial, or federal public health authorities, healthcare facilities, laboratories, or researchers under department-approved data use agreements.

Additionally, the bill imposes limitations on the disclosure of line-level reportable disease data, prohibiting its release for non-public health-related purposes, such as litigation or commercial use. It mandates that any recipient of such data must comply with conditions set by the Department regarding its use, security, retention, and destruction. The act also includes provisions for the release of immunization information under specific circumstances, ensuring compliance with existing privacy laws, and allows for collaborative agreements with registries of other states while maintaining confidentiality protections. This legislation aims to enhance the protection of public health data while allowing for necessary public health activities. The act will take effect upon passage.