MO HB2606

Establishes that patients retain ownership rights over their health records, with health care providers serving as custodians who cannot disclose records without informed consent or specific state law authorization

Requires informed consent to be a signed and dated written authorization specifying the purpose, scope, and recipients of any disclosed health information

Prohibits use of patient health records, including de-identified data or limited data sets, for research purposes without specific informed consent; blanket consents and opt-out mechanisms do not satisfy this requirement

Bars health care providers from conditioning treatment on a patient's decision to grant or withhold consent for release of health records

Creates private right of action for violations, allowing patients to recover actual damages, injunctive relief, attorney's fees, and liquidated damages of $1,000 to $10,000 per unauthorized disclosure