UT HB0199

Extends the repeal date for the Utah Health Data Authority from July 1, 2026 to July 1, 2036, and establishes a July 1, 2036 repeal date for the Health Data Committee

Authorizes the Department of Health and Human Services to share identifiable health data (excluding direct identifiers) within the department and with local health departments, local mental health authorities, and local substance abuse authorities

Establishes the All Payer Claims Database for maintaining health care cost and claim information, and allows the department to require data suppliers to submit fee schedules, contract terms, and reimbursement arrangements

Enacts new data security requirements including mandatory encryption of identifiable health data when stored and transmitted, adoption of HIPAA security safeguards (45 C.F.R. Sec. 164.312), and prohibition on attempting to re-identify individuals from the data

Requires the department to maintain written strategic, data management, and analytics plans (replacing the previous single health data plan requirement) and to publish these plans on its website