personal identifying information; disclosure; prohibition

Plain English Breakdown

The official bill text defines 'personal identifying information' separately for general licensees and EMCTs, but the definitions are identical; the summary combines them.

SB1193: Prohibiting Sale and Commercial Disclosure of Personal Identifying Information

This law stops the Department of Health Services from selling or sharing private details about licensed workers and emergency medical care technicians for business reasons without their permission.

What This Bill Does

• Prohibits the Department of Health Services (DHS) from selling personal identifying information of any person it licenses or certifies regarding public health, safety, or professions.
• Makes personal identifying information confidential and exempt from public records laws if a request is made for a commercial purpose.
• Allows DHS to disclose personal identifying information only if the individual provides written consent that lists what can be shared and why.
• Permits DHS to release data that has been de-identified or aggregated so it does not reasonably allow identification of an emergency medical care technician (EMCT).
• Defines personal identifying information to include social security numbers, home addresses, biometric records like fingerprints, and bulk data such as race or religion when combined with other details.

Who It Names or Affects

• The Department of Health Services (DHS)
• Individuals licensed or certified by DHS regarding public health, safety, or professions
• Emergency medical care technicians (EMCTs), including emergency medical technicians and paramedics

Terms To Know

Personal identifying information

Data that can identify a person, such as social security numbers, home addresses, phone numbers, fingerprints, or details like race and religion when combined with other data.

Commercial purpose

A reason for asking for information related to business activities; requests made for this purpose are exempt from public records laws regarding personal identifying information.

De-identified or aggregated

Information that has been changed or combined so it does not reasonably allow the identification of a specific person.

Limits and Unknowns

• The law does not stop DHS from sharing information relating to EMCT licensure with another regulatory entity, including commissions administering license compacts.
• DHS can still disclose an EMCT's licensing history or record of disciplinary actions as allowed by existing statutes.
• The effective date is listed only as the general effective date in the bill text.

Official Summary Text

SB1193 - 572R - Senate Fact Sheet

Assigned to
HHS���������������������������������������������������������������������������������������������������������� AS
PASSED BY HOUSE

ARIZONA STATE SENATE

Fifty-Seventh
Legislature, Second Regular Session

AMENDED

FACT SHEET FOR
S.B. 1193

personal
identifying information; disclosure; prohibition

Purpose

Prohibits the
Department of Health Services (DHS) from selling or disclosing personal
identifying information of a licensee or certificate holder, including an
emergency medical care technician (EMCT), for commercial purposes, unless
specified conditions apply

Background

DHS is
responsible for regulating emergency medical services in Arizona, which
includes defining the scope of practice and certification requirements for
EMCTs, accrediting EMCT training programs, conducting background checks and
investigating complaints. An EMCT is an individual who has been certified by
DHS as an emergency medical technician, advanced emergency medical technician,
emergency medical technician I-99 or a paramedic (
A.R.S. Title 36, Chapter 21.1
).

Information,
documents and records received by or prepared by DHS in connection with an
investigation that relates to EMCTs are confidential and are not subject to
public inspection or civil discovery. The results of the investigation and DHS's
final decision are available to the public only after the investigation is
completed and the investigation file is closed. DHS may release any public
documents that do not include confidential information (
DHS
).

All public
officers and public bodies must maintain all public records reasonably
necessary or appropriate to maintain an accurate knowledge of their official
activities and activities that are supported by monies from the state or a
political subdivision of the state. Each public officer or public body is
responsible for the preservation, maintenance and care of the respective
officer's or body's public records. A person may make a public records request
as authorized by statute by requesting to examine or be provided copies,
printouts or photographs of any public record. The custodian of public records
must promptly furnish the public records request and access to a public record
is deemed denied if a custodian fails to promptly respond to the request in the
manner prescribed by statute (A.R.S. ��
39-101

and
39-121.01
).

There is no
anticipated fiscal impact to the state General Fund associated with this
legislation.

Provisions

1.

Prohibits DHS from selling any personal identifying information of any individual
licensed or certified by DHS regarding public health or safety or professions
and occupations without the individual's consent.

2.

Prohibits DHS from selling or disclosing any personal identifying
information of an EMCT.

3.

Declares the personal identifying information of a DHS licensee or certificate
holder, including an EMCT, confidential and exempt from public records laws if
the request is made for a commercial purpose.

4.

Allows
DHS to disclose personal identifying information of an EMCT if:

a)

the EMCT provides consent, including the information that may be
disclosed and the purposes for which disclosure is authorized; or

b)

the
information has been de-identified or aggregated and does not reasonably allow for
identification of an EMCT.

5.

Specifies
that DHS is not prohibited from:

a)

sharing information relating to EMCT licensure or certification with
another regulatory entity, including a commission that administers a licensure
compact; or

b)

disclosing
information relating to an EMCT's licensing history or record of disciplinary
actions.

6.

Defines

personal identifying information
to include:

a)

a social security number, passport number, driver license number or
taxpayer identification number;

b)

a personal address, personal email address or personal telephone number;

c)

a biometric record, including a photographic image, fingerprint, retinal
scan, voice signature or facial geometry; and

d)

bulk
information that when combined with other request details may pose a privacy
risk, including date of birth, place of birth, race, religion, geographic
indicators, employment information and education information.

7.

Becomes effective on the general effective date.

Amendments Adopted by
Committee

1.

Stipulates that the personal identifying information of an EMCT is
confidential and exempt from public records laws if the request is made specifically
for a commercial purpose.

2.

Modifies the definition of
personal identifying information
.

Amendments Adopted by the
House of Representatives

1.

Expands the prohibition on DHS selling personal identifying information
of an EMCT to apply to any individual licensed or certified by DHS.

2.

Specifies that DHS may share EMCT licensure information with regulatory
entities and disclose an EMCT's licensing history and disciplinary records.

3.

Modifies the definition of
personal identifying information
.

4.

Makes conforming changes.

Senate Action
���������������������������������������������������������
House
Action

HHS��������������� 2/11/26����� DPA��� 6-0-1������������������ HHS��������������� 3/9/26������� DP���������� 10-0-0-2

3
rd
Read��������� 2/25/26����������������� 26-0-4���������������� 3
rd

Read��������� 4/13/26���������������������� 51-3-6

Prepared by Senate Research

April 14, 2026

MM/MS/hk

Current Bill Text

Chapter 0155 - 572R - H Ver of SB1193

House Engrossed
Senate Bill

personal identifying
information; disclosure; prohibition

State of Arizona

Senate

Fifty-seventh Legislature

Second Regular Session

2026

CHAPTER 155

SENATE BILL 1193

AN
ACT

Amending title 36, chapter 1, article 1,
Arizona Revised Statutes, by adding section 36-104.01; Amending title 36,
chapter 21.1, article 1, Arizona Revised Statutes, by adding section 36-2202.02;
relating to personal identifying information.

(TEXT OF BILL BEGINS ON NEXT PAGE)

Be it enacted by the Legislature of the State of Arizona:

Section 1. Title 36, chapter 1, article 1,
Arizona Revised Statutes, is amended by adding section 36-104.01, to read:

START_STATUTE
36-104.01.

Sale of information; prohibition; definition

A. The department may not sell any
personal identifying information of any individual whom the department licenses
or certificates pursuant to this title or title 32. the personal
identifying information of a licensee or certificate holder is confidential
and, if a request for the personal identifying information is made for a
commercial purpose, the personal identifying information is exempt from title
39, chapter 1, article 2.

B. for the purposes of this section,
"personal identifying information" includes:

1. A social security number, passport
number, driver license number or taxpayer identification number.

2. A personal address, personal email
address or personal telephone number.

3. A biometric record, including a
photographic image, a fingerprint, a retinal scan, a voice signature or facial
geometry.

4. Bulk information that when
combined with other request details may pose a privacy risk, including:

(
a
) Date of
birth.

(
b
) Place of
birth.

(
c
) Race.

(
d
) Religion.

(
e
) Geographic
indicators.

(
f
) Employment
information.

(
g
) Education
information.
END_STATUTE

Sec. 2. Title 36, chapter 21.1, article 1,
Arizona Revised Statutes, is amended by adding section 36-2202.02, to read:

START_STATUTE
36-2202.02.

Sale or disclosure of information; prohibition; exception;
definition

A. The department may not sell or
disclose any personal identifying information of an emergency medical care
technician. the personal identifying information of an emergency
medical care technician is confidential and
, if a request
for the personal identifying information is made for a commercial purpose, the
personal identifying information is exempt from title 39, chapter 1, article
2. The department may disclose personal identifying information of
an emergency medical care technician with the emergency medical care
techniciaN's consent that includes the information that may be disclosed and
the purposes for the disclosure.

B. The
department may disclose information that has been de-identified or that
is in an aggregated form and that does not reasonably allow the identification
of an emergency medical care technician.

c. tHIS SECTION DOES NOT PROHIBIT THE
DEPARTMENT FROM SHARING INFORMATION RELATING TO THE APPLICATION FOR licensure
OR the LICENSURE OF AN EMERGENCY MEDICAL CARE TECHNICIAN WITH ANOTHER
REGULATORY ENTITY, INCLUDING A COMMISSION THAT ADMINISTERS A LICENSURE COMPACT.

D. This section does not prevent the
department from disclosing information pertaining to an emergency medical
technician's licensing history or record of disciplinary actions pursuant to
section 36-2220.

E. for the purposes of this section,
"personal identifying information" includes
:

1. A social security number, passport
number, driver license number or taxpayer identification number.

2. A personal address, personal email
address or personal telephone number.

3. A biometric record, including a
photographic image, a fingerprint, a retinal scan, a voice signature or facial
geometry.

4. Bulk information that when
combined with other request details may pose a privacy risk, including:

(
a
) Date of
birth.

(
b
) Place of
birth.

(
c
) Race.

(
d
) Religion.

(
e
) Geographic
indicators.

(
f
) Employment
information.

(
g
) Education
information.

END_STATUTE

APPROVED BY THE GOVERNOR JUNE 19, 2026.

FILED IN THE OFFICE OF THE SECRETARY OF STATE JUNE 22, 2026.