HI HB2299

Requires the Department of Health to establish two permanent or temporary positions: a privacy officer and a security officer to comply with federal HIPAA information privacy and security rules.

Allows the director of health to appoint the privacy officer and security officer without regard to civil service requirements under chapter 76 for an initial three-year period.

Exemption from civil service hiring procedures expires three years after the act's effective date unless extended by the legislature; thereafter appointments must follow civil service procedures.

Implements compliance with 45 Code of Federal Regulations sections 164.530(a)(1) and 164.308(a)(2) regarding designation of privacy and security officials.

Effective date: July 1, 2050.