Title 18: Health
Chapter 221: HEALTH CARE ADMINISTRATION
Sub-Chapter 001: Health Information Technology
18 V.S.A. § 9410. Health care database
§ 9410. Health care database
(a)(1) The Board shall establish and maintain a unified health care database to enable the Commissioner and the Board to carry out their duties under this chapter, chapter 220 of this title, and Title 8, including:
(2)(A) The program authorized by this section shall include a consumer health care price and quality information system designed to make available to consumers transparent health care price information, quality information, and such other information as the Board determines is necessary to empower individuals, including uninsured individuals, to make economically sound and medically appropriate decisions.
(B) The Commissioner may require a health insurer covering at least five percent of the lives covered in the insured market in this State to file with the Commissioner a consumer health care price and quality information plan in accordance with rules adopted by the Commissioner.
(C) The Board shall adopt such rules as are necessary to carry out the purposes of this subdivision. The Board's rules may permit the gradual implementation of the consumer health care price and quality information system over time, beginning with health care price and quality information that the Board determines is most needed by consumers or that can be most practically provided to the consumer in an understandable manner. The rules shall permit health insurers to use security measures designed to allow subscribers access to price and other information without disclosing trade secrets to individuals and entities who are not subscribers. The rules shall avoid unnecessary duplication of efforts relating to price and quality reporting by health insurers, health care providers, health care facilities, and others, including activities undertaken by hospitals pursuant to their community report obligations under section 9405b of this title.
(b) The database shall contain unique patient and provider identifiers and a uniform coding system, and shall reflect all health care utilization, costs, and resources in this State, and health care utilization and costs for services provided to Vermont residents in another state.
(c) Health insurers, health care providers, health care facilities, and governmental agencies shall file reports, data, schedules, statistics, or other information determined by the Board to be necessary to carry out the purposes of this section. Such information may include:
(e) Records or information protected by the provisions of the physician-patient privilege under 12 V.S.A. § 1612(a), or otherwise required by law to be held confidential, shall be filed in a manner that does not disclose the identity of the protected person.
(g) Any person who knowingly fails to comply with the requirements of this section or rules adopted pursuant to this section shall be subject to an administrative penalty of not more than $1,000.00 per violation. The Board may impose an administrative penalty of not more than $10,000.00 each for those violations the Board finds were willful. In addition, any person who knowingly fails to comply with the confidentiality requirements of this section or confidentiality rules adopted pursuant to this section and uses, sells, or transfers the data or information for commercial advantage, pecuniary gain, personal gain, or malicious harm shall be subject to an administrative penalty of not more than $50,000.00 per violation. The powers vested in the Board by this subsection shall be in addition to any other powers to enforce any penalties, fines, or forfeitures authorized by law.
(A) their health insurance claims data, provided that the Board may exempt from all or a portion of the filing requirements of this subsection data reflecting utilization and costs for services provided in this State to residents of other states;
(2) The collection, storage, and release of health care data and statistical information that is subject to the federal requirements of the Health Insurance Portability and Accountability Act ("HIPAA") shall be governed exclusively by the regulations adopted thereunder in 45 C.F.R. Parts 160 and 164.
(B) All health insurers shall accept electronic claims submitted in Centers for Medicare and Medicaid Services format for UB-92 or HCFA-1500 records, or as amended by the Centers for Medicare and Medicaid Services.
(3)(A) The Board shall collaborate with the Agency of Human Services and participants in the Agency's initiatives in the development of a comprehensive health care information system. The collaboration is intended to address the formulation of a description of the data sets that will be included in the comprehensive health care information system, the criteria and procedures for the development of limited-use data sets, the criteria and procedures to ensure that HIPAA compliant limited-use data sets are accessible, and a proposed time frame for the creation of a comprehensive health care information system.
(B) To the extent allowed by HIPAA, the data shall be available as a resource for insurers, employers, providers, purchasers of health care, and State agencies to continuously review health care utilization, expenditures, and performance in Vermont. In presenting data for public access, comparative considerations shall be made regarding geography, demographics, general economic factors, and institutional size.
(C) Consistent with the dictates of HIPAA, and subject to such terms and conditions as the Board may prescribe by rule, the Vermont Program for Quality in Health Care shall have access to the unified health care database for use in improving the quality of health care services in Vermont. In using the database, the Vermont Program for Quality in Health Care shall agree to abide by the rules and procedures established by the Board for access to the data. The Board's rules may limit access to the database to limited-use sets of data as necessary to carry out the purposes of this section.
(D) Notwithstanding HIPAA or any other provision of law, the comprehensive health care information system shall not publicly disclose any data that contains direct personal identifiers. For the purposes of this section, "direct personal identifiers" include information relating to an individual that contains primary or obvious identifiers, such as the individual's name, street address, e-mail address, telephone number, and Social Security number.
(i) On or before January 15, 2008 and every three years thereafter, the Commissioner shall submit a recommendation to the General Assembly for conducting a survey of the health insurance status of Vermont residents.
(B) any third party administrator, any pharmacy benefit manager, any entity conducting administrative services for business, and any other similar entity with claims data, eligibility data, provider files, and other information relating to health care provided to a Vermont resident, and health care provided by Vermont health care providers and facilities required to be filed by a health insurer under this section;
(2) The Board may adopt rules to carry out the provisions of this subsection, including criteria for the required filing of such claims data, eligibility data, provider files, and other information as the Board determines to be necessary to carry out the purposes of this section and this chapter. (Added 1991, No. 160 (Adj. Sess.), § 1, eff. May 11, 1992; amended 1995, No. 180 (Adj. Sess.), §§ 16, 38(a); 2005, No. 71, § 312; 2005, No. 122 (Adj. Sess.), § 14; 2005, No. 191 (Adj. Sess.), § 57; 2007, No. 15, § 22; 2007, No. 70, § 25; 2007, No. 80, § 19; 2009, No. 42, § 33; 2009, No. 61, § 3; 2009, No. 156 (Adj. Sess.), § I.27; 2011, No. 48, § 27, eff. Oct. 1, 2011; 2013, No. 79, § 40, eff. June 7, 2013.)