WI AB1155

Unregulated pregnancy centers (facilities that do not provide or refer for abortions or emergency contraception) are prohibited from disclosing nonpublic personal health information without written or electronic authorization from the individual

Valid authorization must include the individual's identity and signature, description of information to be disclosed, recipients and purpose of disclosure, authorization duration (maximum 24 months), and notice of revocation rights

Centers must verbally disclose to individuals that they are not covered by HIPAA privacy regulations before obtaining authorization, and must retain authorization records for 6 years

Centers cannot discriminate against individuals who decline to authorize disclosure and must notify individuals of any data breaches involving their computerized health information

Violations constitute unfair and deceptive trade practices under Wisconsin law; the act takes effect on the first day of the 3rd month after publication