As used in this chapter:

(A) "Administrative safeguards," "physical safeguards," and "technical safeguards" have the same meanings as in 45 C.F.R. 164.304.

(B)

"Covered entity," "disclosure," "health care provider," "health information," "individually identifiable health information," "protected health information," and "use" have the same meanings as in 45 C.F.R. 160.103.

(C) "Designated record set" has the same meaning as in 45 C.F.R. 164.501.

(D) "Direct exchange" means the activity of electronic transmission of health information through a direct connection between the electronic record systems of health care providers without the use of a health information exchange.

(E) "Health care component" and "hybrid entity" have the same meanings as in 45 C.F.R. 164.103.

(F) "Health information exchange" means any person or governmental entity that provides in this state a technical infrastructure to connect computer systems or other electronic devices used by covered entities to facilitate the secure transmission of health information. "Health information exchange" excludes health care providers engaged in direct exchange, including direct exchange through the use of a health information service provider.

(G) "HIPAA privacy rule" means the standards for privacy of individually identifiable health information in 45 C.F.R. part 160 and in 45 C.F.R. part 164, subparts A and E.

(H) "Interoperability" means the capacity of two or more information systems to exchange information in an accurate, effective, secure, and consistent manner.

(I) "Minor" means an unemancipated person under eighteen years of age or a mentally or physically disabled person under twenty-one years of age who meets criteria specified in rules adopted by the medicaid director under section 3798.13 of the Revised Code.

(J) "More stringent" has the same meaning as in 45 C.F.R. 160.202.

(K) "Personal representative" means a person who has authority under applicable law to make decisions related to health care on behalf of an adult or emancipated minor, or the parent, legal guardian, or other person acting in loco parentis who is authorized under law to make health care decisions on behalf of an unemancipated minor. "Personal representative" does not include the parent or legal guardian of, or another person acting in loco parentis to, a minor who consents to the minor's own receipt of health care or a minor who makes medical decisions on the minor's own behalf pursuant to law, court approval, or because the minor's parent, legal guardian, or other person acting in loco parentis has assented to an agreement of confidentiality between the provider and the minor.

(L) "Political subdivision" means a municipal corporation, township, county, school district, or other body corporate and politic responsible for governmental activities in a geographic area smaller than that of the state.

(M) "State agency" means any one or more of the following:

(1) The department of administrative services;

(2) The department of aging;

(3) The department of mental health and addiction services;

(4) The department of developmental disabilities;

(5) The department of education;

(6) The department of health;

(7) The department of insurance;

(8) The department of job and family services;

(9) The department of medicaid;

(10) The department of rehabilitation and correction;

(11) The department of youth services;

(12) The bureau of workers' compensation;

(13) The opportunities for Ohioans with disabilities agency;

(14) The office of the attorney general;

(15) A health care licensing board created under Title XLVII of the Revised Code that possesses individually identifiable health information.

Amended by 133rd General Assembly File No. TBD, HB 166, §101.01, eff. 10/17/2019.

Amended by 130th General Assembly File No. 25, HB 59, §101.01, eff. 9/29/2013.

Added by 129th General AssemblyFile No.127, HB 487, §101.01, eff. 9/10/2012.