Relating to electronic health record requirements; authorizing a civil penalty.
What changed between versions
Requires electronic health records to be physically maintained in the United States or its territories
Mandates that EHR information be accessible only to individuals performing duties related to treatment, payment, or health care operations
Requires implementation of administrative, physical, and technical safeguards to protect EHR confidentiality, integrity, and availability
Prohibits collection, storage, or sharing of credit score or voter registration status information in EHRs
Allows AI use for diagnostic purposes with requirements for practitioner review and patient disclosure
Ensures minors have unrestricted access to their EHRs immediately upon request
Requires EHRs to include separate spaces for documenting biological sex and sexual development disorder information
Defines biological sex based on observed biological sex recorded at birth and includes provisions for sexual development disorders
Establishes civil penalties up to $250,000 for intentional violations involving financial gain
Sets effective date of September 1, 2025, with EHR storage requirements applying from January 1, 2026