PA 09-95—sSB 1079

Public Health Committee


SUMMARY: This act allows state agencies participating in the Connecticut Health Information Network (CHIN) to disclose personally identifiable information in their databases to the CHIN administrator and its subcontractors for (1) network development and verification and (2) data integration and aggregation to allow for responses to network inquiries. Such disclosure is subject to federal restrictions on disclosure or redisclosure of such information. The CHIN administrator and CHIN subcontractors must not disclose personally identifiable information.

The act prohibits state agencies participating in CHIN from disclosing information to CHIN if it would violate federal law, including the 1996 federal Health Insurance Portability and Accountability Act (HIPAA) and the 1974 Family Educational Rights and Privacy Act and associated regulations.

EFFECTIVE DATE: October 1, 2009



State law (CGS 19a-25e) authorizes the Department of Public Health (DPH) and the UConn Health Center (UCHC), within available appropriations, to develop a CHIN plan. This plan is to integrate state health and social services data within and across the UCHC, the Office of Health Care Access (OHCA), DPH, and the Developmental Services (DDS), and Children and Families (DCF) departments. Data from other state agencies may be integrated into the network as funding and federal law permit. The CHIN must securely integrate this data consistent with state and federal laws.

The law requires DPH and UCHC's Center for Public Health and Health Policy to collaborate with the Department of Information Technology, DDS, DCF, and OHCA in developing the CHIN plan. The plan must:

1. include research in and describe existing health and human services data;

2. inventory the various health and human services data aggregation initiatives currently underway;

3. include a framework and options for implementing the CHIN, including ways to use the network to get aggregate data on the state's key health indicators;

4. identify and comply with confidentiality, security, and privacy standards; and

5. include a detailed cost estimate for implementation and potential funding sources.

OLR Tracking: JK: VR: JL: DF