KentuckyHB 6762026 Regular SessionHouseWALLET

AN ACT relating to the Kentucky statewide health data utility.

Sponsored By: Rebecca Raymer (Republican)

Became Law

Actuarial AnalysisAdministrative Regulations And ProceedingsAdvisory Boards, Commissions, And CommitteesData ProtectionEducation, HigherEffective Dates, DelayedFederal Laws And RegulationsFundsGeneral AssemblyHealth And Medical ServicesHealth Care ProfessionalsHospitals And Health FacilitiesInsuranceInsurance, HealthInsurance, Motor VehicleLegislative Research CommissionLocal GovernmentMedicaidPharmacistsPhysiciansPublic HealthReports MandatedState Agencies

Your PRIA Score

Score Hidden

Personalized for You

How does this bill affect your finances?

Sign up for a PRIA Policy Scan to see your personalized alignment score for this bill and every other piece of legislation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.

Free to start

Bill Overview

Analyzed Economic Effects

6 provisions identified: 3 benefits, 1 costs, 2 mixed.

New reporting rules and fines for providers

Health facilities, payers, and community data‑sharing groups must share and submit health data as state rules require, when federal law allows. If you must report, you must sign an agreement and start sending data by the later of three months after the exchange or database is operational, or when you begin the covered activity. Fines can reach up to $1,000 per day for not reporting, and the cap can be adjusted every two years by medical CPI. Government agencies are not fined. You have 20 days to ask for an administrative hearing after a proposed penalty. The secretary can investigate, subpoena records, and seek court orders to enforce the rules.

Kentucky builds statewide health data utility

The law creates a single statewide health data utility and makes it the only statewide network. It must include a health care exchange, a pharmacy exchange, an all‑payer claims database, and a community exchange. A consortium of four public universities runs it, adopting organizing papers within 60 days; the executive director must sign the operating contract within 180 days. A new state board sets data‑sharing and security rules. A restricted fund pays for the utility with grants, fees, penalties, and appropriations, and the money does not lapse. The executive director writes rules, accepts grants, and must follow HIPAA and other privacy laws; the Legislative Research Commission gets read‑only access without fees. The Office of Data Analytics oversees cabinet data work, and the current health information exchange keeps running until the new utility is live. Initial 14 board appointments happen within 90 days and are staggered for two, three, and four years. The cabinet can seek needed federal approvals within 90 days and delay only parts that require approval. Older health data statutes are repealed on July 1, 2028, as the new system replaces them.

Your health data privacy and opt out

You may opt out of having your electronic longitudinal health record included in the statewide utility. Opting out does not stop use of your deidentified or aggregated claims or encounter data for public health, research, and planning when you cannot be reasonably identified. Utility data is exempt from public records requests. The consortium and its vendors cannot release or use data without the executive director’s written approval. No one can reidentify people, reveal trade secrets, or sell the data; users must agree in writing to follow these rules.

More CHIP data shared and reported

The children’s health insurance program coordinates its data with the statewide utility. If the utility is not ready, it uses another state reporting law. The program collects, analyzes, and publicly shares data on enrollment, services, and health outcomes. This improves transparency for families.

Parkinson's disease registry starts in 2026

Beginning January 1, 2026, movement disorder centers and providers must report Parkinson's cases to the state registry in an approved format. Patients are notified and can opt out in writing. If a patient opts out, the provider may only report that a case exists, not personal research data. Automated reporting tools may be used. The cabinet may share registry data with approved researchers under strict confidentiality.

EMS providers: new data and privacy rules

Ambulance services, mobile integrated care, and first‑response programs must collect and send patient care data to the Board in an electronic format it sets. The Board provides any required file layout at no charge. Services must keep training, licensure, and on‑duty health records at their base for Board review. Providers must give patient care summaries to receiving facilities and to the transporting ambulance; non‑transported patients or their guardians can ask for a copy. Patient EMS records sent to the Board are confidential and follow HIPAA; release needs written consent or a court order. The Board publishes a yearly EMS data report without personal identifiers, and its evaluation files are confidential and not usable in court. The Cabinet for Health and Family Services has full access to Board data to carry out its duties.

Sponsors & Cosponsors

Sponsor

Rebecca Raymer
Republican • House

Cosponsors

There are no cosponsors for this bill.

Roll Call Votes

All Roll Calls

Yes: 130 • No: 1

Senate vote • 3/31/2026

3rd reading, passed

Yes: 37 • No: 1

House vote • 3/19/2026