NC H754

Requires covered entities to notify patients in writing or electronically before using or disclosing protected health information for purposes outside normal patient care, billing, or insurance coverage determination.

Notification must be limited to 250 words, explain how the patient's health information will be distributed or sold, and clearly state that treatment or care access is not contingent on patient agreement.

Requires covered entities to obtain written or electronic patient consent to the notice of data sale or transfer before proceeding with any such use or disclosure.

Prohibits covered entities from making treatment, care access, patient portal access, or insurance coverage contingent on patient agreement to data sale or transfer notices.

Exempts information collected through clinical research involving human subjects conducted according to International Council for Harmonisation good clinical practice guidelines; effective January 1, 2024.