relative to patient privacy protections.

HB 1317 strengthens patient privacy protections in New Hampshire by prohibiting state agencies, contractors, vendors, and grant recipients from sharing personally identifiable medical, disability, or mental health data with the federal government or third parties - unless specific conditions apply. These exceptions include obtaining an individual’s written consent, complying with existing law or court orders, or disclosing data to provide necessary health care services. The bill also requires that any permitted disclosure share only the minimum necessary data and prioritize de-identified information when possible. It explicitly affirms that these state rules do not override federal privacy laws like HIPAA or the ADA, and violations could result in civil penalties enforced by the attorney general.