House File 488 - Introduced
HOUSE FILE 488
BY COMMITTEE ON HUMAN
RESOURCES
(SUCCESSOR TO HSB 141)
A BILL FOR
1 An Act relating to health-related data including hospital data
2 and certain information included in reportable disease
3 reports.
4 BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF IOWA:
TLSB 2216HV (3) 89
pf/rh
H.F. 488
1 Section 1. Section 11.41, subsection 3, Code 2021, is
2 amended to read as follows:
3 3. If the information, records, instrumentalities, and
4 properties sought by the auditor of state are required by law
5 to be kept confidential, the auditor of state shall have access
6 to the information, records, instrumentalities, and properties,
7 but shall maintain the confidentiality of all such information
8 and is subject to the same penalties as the lawful custodian
9 of the information for dissemination of the information.
10 However, the auditor of state shall not have access to the
11 income tax returns of individuals or to an individual’s name
12 or residential address from a reportable disease report under
13 section 139A.3.
14 Sec. 2. Section 135.166, subsection 2, Code 2021, is amended
15 to read as follows:
16 2. Unless otherwise authorized or required by state or
17 federal law, data collected under this section shall not
18 include the social security number or name of the individual
19 subject of the data.
20 Sec. 3. Section 139A.3, Code 2021, is amended by adding the
21 following new subsection:
22 NEW SUBSECTION. 1A. A state or local agency employee
23 or agent shall not have access to personally identifiable
24 information included in a reportable disease report provided
25 to or maintained by the department, a local board, or a local
26 department, unless the employee or agent has completed data
27 confidentiality training.
28 EXPLANATION
29 The inclusion of this explanation does not constitute agreement with
30 the explanation’s substance by the members of the general assembly.
31 This bill relates to health-related data protections.
32 The bill provides that the auditor of state shall not have
33 access to an individual’s name or residential address from a
34 reportable disease report.
35 The bill includes provisions related to health data
LSB 2216HV (3) 89
-1- pf/rh 1/2
H.F. 488
1 collected and used by the department of public health
2 (DPH). Current law directs DPH to enter into a memorandum of
3 understanding with a contractor selected through a request
4 for proposals process to collect, maintain, and disseminate
5 hospital inpatient, outpatient, and ambulatory data. Current
6 law also provides that unless otherwise authorized by state or
7 federal law, the data collected shall not include the social
8 security number of the individual subject of the data. Under
9 the bill, data prohibited from collection would also include
10 the name of the individual subject of the data.
11 The bill also prohibits a state or local agency employee or
12 agent from having access to personally identifiable information
13 included in a reportable disease report provided to or
14 maintained by the department of public health, a local board
15 of health, or a local public health department, unless the
16 employee or agent has completed data confidentiality training.
LSB 2216HV (3) 89
-2- pf/rh 2/2

Statutes affected:
Introduced: 11.41, 139A.3