Insurance, Health, Accident

Plain English Breakdown

The bill does not specify the consequences for non-compliance with the notification requirement.

Healthcare Cybersecurity Notification Law

This bill requires healthcare providers to notify health insurance entities about cyber-attacks as soon as possible.

What This Bill Does

• Requires healthcare providers, groups, practices, clinics, facilities, or other entities under contract with one or more health insurance entities for reimbursement of submitted claims to provide notice to each such entity if they are the subject of a cyber-attack as soon as practicable.

Who It Names or Affects

• Healthcare providers, groups, practices, clinics, facilities, or other entities
• Health insurance entities

Terms To Know

Cyber-Attack

An attempt by hackers to damage or steal information from a computer system.

Limits and Unknowns

• Does not specify the exact timeframe for 'as soon as practicable'.

Official Summary Text

Abstract summarizes the bill.

Current Bill Text

SENATE BILL 555
By Reeves

HOUSE BILL 511
By Terry

HB0511
001872
- 1 -

AN ACT to amend Tennessee Code Annotated, Title 33;
Title 56; Title 63; Title 68, Chapter 11 and Title 71,
relative to health insurance.

BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF TENNESSEE:
SECTION 1. Tennessee Code Annotated, Title 56, Chapter 7, Part 10, is amended by
adding the following as a new section:
A healthcare provider, healthcare group, practice, or clinic, healthcare facility, or
other entity contracted with one (1) or more health insurance entities for reimbursement
of submitted claims for the provision of health care or healthcare-related goods or
services, shall provide notice to each such health insurance entity as soon as practicable
if the healthcare provider, healthcare group, practice, or clinic, healthcare facility, or
other entity is the subject of a cyber-attack.
SECTION 2. This act takes effect upon becoming a law, the public welfare requiring it.