AZ SB1596

Establishes minimum standards for health records banks in Arizona, requiring the Department of Health Services to prescribe operational requirements for entities providing centralized databases of consumer health records.

Mandates health records banks provide 24/7 electronic account access, deliver medical record copies within 24 hours of request, maintain 3-year activity records, allow account delegation, and enable consumers to share information for research purposes.

Requires health records banks to report security breaches, correct errors promptly, destroy closed account data within 60 days, and retain information for at least one year after consumer death.

Protects health records from subpoena or legal examination while maintaining access to original records held by healthcare providers; establishes penalties including class 6 felony for willful unauthorized disclosure and class 1 misdemeanor for negligent disclosure.

Imposes $10,000 civil penalty per violation and authorizes Department of Health Services to issue cease and desist orders against non-compliant health records banks.