S.B. No. 55 introduces a new provision to the Health and Safety Code, specifically adding Section 181.007, which prohibits the certification of class actions against certain health care entities for damages resulting from the disclosure of protected health information due to a cyber attack. This means that if a covered entity experiences a cyber attack that leads to the unauthorized disclosure of health information, individuals cannot collectively sue as a class action.
The new law applies to actions that are either filed on or after the effective date of the Act or are pending at that time. The Act is set to take effect 91 days after the conclusion of the legislative session.
Statutes affected: Introduced: ()