IL SB2900

Amends the Medical Patient Rights Act to require covered entities under the federal Health Insurance Portability and Accountability Act (HIPAA) to obtain valid authorization before using or disclosing a patient's protected health information for fundraising communications.

Requires covered entities to obtain valid authorization before using or disclosing a patient's protected health information for marketing purposes.

Defines "valid authorization" as an individual opting in (consenting in writing using initials or signature) to receiving fundraising or marketing communications from a covered entity.

States the General Assembly's intent that these requirements increase privacy protections for individuals whose protected and individually identifiable health information is subject to use or disclosure.

Takes effect immediately upon becoming law.