AZ SB1236

Establishes that "health care businesses" collecting individually identifiable health information must disclose to contractors whether any information will be transferred outside the United States.

Requires health care businesses to obtain written consent from individuals before transmitting their health information to sites outside the United States, with consent renewed annually and revocable at any time.

Mandates that consent forms clearly disclose the transmission of information outside the U.S., annual renewal requirement, revocation rights, and the procedure for revoking consent.

Prohibits health care businesses from discriminating against or denying services to individuals who refuse to consent to offshore transmission of their health information.