The proposed bill introduces the "Public Health Data Privacy and Protection Act" as a new chapter in Title 23 of the General Laws, focusing on the confidentiality and management of reportable disease data held by the Rhode Island Department of Health. It defines key terms such as "de-identified data," "line-level data," and "public health purpose." The bill establishes that all reportable disease data, including line-level data, is confidential and not considered a public record. It outlines the authority of the Department of Health in determining access to this data and specifies the conditions under which de-identified data may be released for public health purposes, including sharing with other health authorities and researchers under strict data use agreements.

Additionally, the bill imposes limitations on the disclosure of line-level reportable disease data, prohibiting its release for non-public health-related purposes, such as litigation or commercial use. It mandates that any recipient of this data must comply with conditions set by the Department regarding its use, security, retention, and destruction. The act also includes provisions for the release of immunization information under specific circumstances, ensuring compliance with existing privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA). This legislation aims to enhance the protection of public health data while allowing for necessary public health activities. The act will take effect upon passage.