F:\P11\NHI\TRICOMM\AAHCA09_001.

XML

62
1 ‘‘(F) an enforcement process that includes
2 timely investigation of complaints, random au-
3 dits to ensure compliance, civil monetary and
4 programmatic penalties for non-compliance con-
5 sistent with existing laws and regulations, and
6 a fair and reasonable appeals process building
7 off of enforcement provisions under this part.
8 ‘‘(b) LIMITATIONS ON USE OF DATA.—Nothing in
9 this section shall be construed to permit the use of infor-
10 mation collected under this section in a manner that would
11 adversely affect any individual.
12 ‘‘(c) PROTECTION OF DATA.—The Secretary shall en-
13 sure (through the promulgation of regulations or other-
14 wise) that all data collected pursuant to subsection (a)
15 are—
16 ‘‘(1) used and disclosed in a manner that meets
17 the HIPAA privacy and security law (as defined in
18 section 3009(a)(2) of the Public Health Service
19 Act), including any privacy or security standard
20 adopted under section 3004 of such Act; and
21 ‘‘(2) protected from all inappropriate internal
22 use by any entity that collects, stores, or receives the
23 data, including use of such data in determinations of
24 eligibility (or continued eligibility) in health plans,

f:\VHLC\071409\071409.140.xml (444390|2)
July 14, 2009 (12:51 p.m.)
VerDate Nov 24 2008 12:51 Jul 14, 2009 Jkt 000000 PO 00000 Frm 00062 Fmt 6652 Sfmt 6201 C:\TEMP\AAHCA0~1.XML HOLCPC