HF4478

Purpose

• Clarify and expand how data held by state agencies that run or fund welfare and mental health programs can be collected, stored, shared, and used.
• Create a formal process for challenging the accuracy or completeness of certain data (specifically, sex offender program data for civilly committed offenders) and require a written response from the data practices official.
• Update definitions to distinguish what counts as welfare data, medical data, and related records, and to set rules for when and with whom data can be shared to improve coordination, program administration, fraud prevention, and service delivery.

Main Provisions

• Data challenges for sex offender program data

  • If there are challenges to the accuracy or completeness of data about a civilly committed sex offender, the challenge must be submitted in writing to the data practices compliance official at Direct Care and Treatment (DCT) or a designee, who must respond.

• Definitions related to data and services

  • Directory information: includes the patient’s name, date admitted, and general condition.
  • Medical data: data collected because someone is a patient at various health facilities or providers operated or funded by government entities, but excluding data maintained by Direct Care and Treatment.
  • Welfare system: broad definition covering many state agencies and contractors involved in public assistance and social services.
  • Mental health data: data about individuals receiving mental health services.
  • Fugitive felon: someone convicted of a felony who is fleeing confinement or violating probation/parole.
  • Private licensing agency: a licensing body for child welfare-related services.

• Data sharing and privacy framework (Subdivisions under Sec. 4)

  • Data on individuals in the welfare system are private data, with many specific exceptions allowing disclosure.
  • Permitted disclosures include, among others:
  • Court orders, statutes, or authorizations.
  • Sharing with agencies and personnel within the welfare system to verify identity, determine eligibility, and coordinate services across programs.
  • Administering federal funds and programs and evaluating program effectiveness and fraud.
  • Data matching and coordination with departments such as Revenue, Education, Health, Employment and Economic Development, and others.
  • Coordination of services across public assistance programs (e.g., MFIP, SNAP, general assistance, child care, medical programs).
  • Interagency data exchanges for program monitoring, eligibility, cost effectiveness, and outcomes (including Ticket to Work and related Acts).
  • Coordination of health care services and emergency responses when needed to protect health or safety.
  • Data sharing with guardianship processes and protection/advocacy systems when appropriate.
  • Data exchanges to support special transportation services and school coordination, as well as for child support and education-related purposes.
  • Health records and protected health information (PHI) remain governed by health privacy rules (e.g., HIPAA-related provisions) and are not to be exchanged indiscriminately; certain health data sharing is carved out or restricted to specific purposes.
  • Mental health data have special handling: they are treated with particular care, but may be disclosed under defined circumstances within the welfare system framework.
  • In some cases, disclosures may be made to law enforcement, health authorities, or state and federal partners, including for fugitive felon cases, or when a request is in writing and within official duties.

• Consent and guardianship coordination

  • Direct Care and Treatment may disclose welfare system data to support guardianship coordination, but must obtain the client’s consent unless the client lacks capacity or has an unavailable/current guardian.

• Additional cross-agency coordination

  • The statute envisions data sharing to:
  • Coordinate and evaluate public assistance programs (MFIP, SNAP, energy assistance, etc.).
  • Monitor unemployment benefits, rehabilitation services, and child care assistance.
  • Align services with education, health, and social service agencies.
  • Facilitate protecting the health and safety of individuals in emergency situations.
  • Support guardianship, investigations, and legal proceedings as authorized.

Significant Changes to Existing Law

• Adds and clarifies a formal process for challenging sex offender program data accuracy (writing to a compliance official with a required response).
• Broadly redefines and classifies data within the welfare system, including explicit definitions of directory information and medical data, and clarifies what data is considered “private.”
• Significantly expands permissible data disclosures across multiple state agencies and programs to improve coordination, oversight, fraud prevention, and program evaluation.
• Introduces extensive enumerated disclosure authorities, including to:
  • Departments of Revenue, Education, Health, Employment and Economic Development, and others.
  • Guardianship and protection/advocacy entities.
  • Law enforcement, counties, and interstate information networks (under specific conditions).
  • Education programs for purposes like determining eligibility for free/reduced-price meals and energy assistance verification.
  • Health providers and school officials for coordinated care and services.
• Maintains privacy protections for health data, but establishes circumstances under which mental health data and certain welfare data may be shared to support program administration, emergency responses, or guardianship coordination.
• Allows sharing of certain participant information (names, birth dates, addresses, program status) to specific agencies and officials to coordinate services, monitor eligibility, and ensure program integrity, with explicit restrictions on the scope of disclosed data.

Practical Implications

• Public program agencies will be able to coordinate more easily across welfare, health, education, and law enforcement to deliver services, detect fraud, and monitor outcomes.
• Privacy protections remain in place, but there are numerous defined exceptions that allow data to flow between agencies to support program administration and safety.
• Individuals’ data care and handling will be more complex, with new processes (e.g., data challenges) and consent considerations for guardianship-related disclosures.

Relevant Terms - Direct Care and Treatment (DCT) - welfare system - private data - data practices compliance official - data challenges - sex offender program data - civilly committed sex offender - directory information - medical data - mental health data - fugitive felon - private licensing agency - data sharing - court order - government agencies (DHS, CYF, Education, Revenue, Health, DOE, etc.) - MFIP, SNAP, TANF, medical assistance, general assistance, child care assistance - health insurance/PHI (HIPAA-related rules) - guardianship coordination - protection and advocacy system - emergency data disclosures - unemployment benefits - Ticket to Work and related acts - interagency data exchanges - data privacy and data accuracy - data sharing for crime/fraud investigations