Current through Register Vol. 54, No. 49, December 7, 2024
(a)Purpose. This chapter: (1) Governs the treatment of all nonpublic personal health information about individuals by various licensees of the Department.(2) Describes the conditions under which a licensee may disclose nonpublic personal health information about consumers to a third party.(3) Requires licensees to obtain an authorization from consumers prior to disclosing nonpublic personal health information, unless otherwise permitted in this chapter.(b)Compliance. A licensee domiciled in this Commonwealth that is in compliance with this chapter and Chapter 146a (relating to privacy of consumer financial information) in a state that has not enacted laws or regulations that meet the requirements of Title V of the act of November 12, 1999 (Pub. L. No. 106-102, 113 Stat. 1338) known as the Gramm-Leach-Bliley Act (Financial Services Modernization Act of 1999) (15 U.S.C.A. §§ 6801-6827) may nonetheless be deemed to be in compliance with Title V of the Gramm-Leach-Bliley Act in the other state.(c)Examples. The examples provided in this chapter are for illustrative purposes only and do not otherwise limit or restrict the scope of this chapter.