As Introduced 1 122nd General Assembly 4 Regular Session H. B. No. 243 5 1997-1998 6 REPRESENTATIVES VAN VYVEN-BRADING-CORBIN-HAINES-SCHURING- 8 TAYLOR-TERWILLEGER-TIBERI 9 11 A B I L L To enact section 3702.40 of the Revised Code to 13 establish standards for using electronic 14 signatures and computer-generated signature codes 15 in records of health care facilities. 16 BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF OHIO: 18 Section 1. That section 3702.40 of the Revised Code be 20 enacted to read as follows: 21 Sec. 3702.40. (A) AS USED IN THIS SECTION: 23 (1) "HEALTH CARE FACILITY" MEANS ANY OF THE FOLLOWING: 26 (a) A HOSPITAL, AS DEFINED IN SECTION 3727.01 OF THE 29 REVISED CODE; (b) AN AMBULATORY SURGICAL FACILITY, AS DEFINED IN SECTION 31 3702.30 OF THE REVISED CODE; 34 (c) A FREESTANDING BIRTHING CENTER; 36 (d) A FREESTANDING CARDIAC CATHETERIZATION FACILITY; 38 (e) A FREESTANDING OR MOBILE DIAGNOSTIC IMAGING CENTER; 40 (f) A FREESTANDING DIALYSIS CENTER; 42 (g) A FREESTANDING EMERGENCY FACILITY; 44 (h) AN URGENT CARE CENTER; 46 (i) A FREESTANDING EXTRACORPOREAL SHOCKWAVE LITHOTRIPSY 48 CENTER; 49 (j) A FREESTANDING RADIATION THERAPY CENTER; 51 (k) A HOME HEALTH AGENCY; 53 (l) A HOSPICE CARE PROGRAM, AS DEFINED IN SECTION 3712.01 55 OF THE REVISED CODE; 56 2 (m) A NURSING HOME, RESIDENTIAL CARE FACILITY, OR HOME FOR 58 THE AGING, ALL AS DEFINED IN SECTION 3721.01 OF THE REVISED CODE; 61 (n) AN ADULT CARE FACILITY, AS DEFINED IN SECTION 3722.01 63 OF THE REVISED CODE; 64 (o) A NURSING FACILITY OR INTERMEDIATE CARE FACILITY FOR 66 THE MENTALLY RETARDED, BOTH AS DEFINED IN SECTION 5111.20 OF THE 68 REVISED CODE; 69 (p) A FACILITY OR PORTION OF A FACILITY CERTIFIED AS A 71 SKILLED NURSING FACILITY UNDER TITLE XVIII OF THE "SOCIAL 74 SECURITY ACT," 49 STAT. 620 (1935), 42 U.S.C.A. 301, AS AMENDED. 76 (2) "HEALTH CARE RECORD" MEANS ANY DOCUMENT OR COMBINATION 79 OF DOCUMENTS PERTAINING TO A PATIENT'S MEDICAL HISTORY, DIAGNOSIS, PROGNOSIS, OR MEDICAL CONDITION THAT IS GENERATED AND 80 MAINTAINED IN THE PROCESS OF THE PATIENT'S TREATMENT AT A HEALTH 81 CARE FACILITY. (B) ALL WRITTEN NOTES, ORDERS, AND OBSERVATIONS ENTERED 83 INTO A HEALTH CARE RECORD AT A HEALTH CARE FACILITY, INCLUDING 84 ANY INTERPRETIVE REPORTS OF DIAGNOSTIC TESTS OR SPECIFIC 86 TREATMENTS, SUCH AS RADIOLOGIC OR ELECTROCARDIOGRAPHIC REPORTS, 87 OPERATIVE REPORTS, REPORTS OF PATHOLOGIC EXAMINATION OF TISSUE, 88 AND SIMILAR REPORTS, SHALL BE AUTHENTICATED BY THE INDIVIDUAL WHO 89 MADE OR AUTHORIZED THE ENTRY. HEALTH CARE RECORD ENTRIES MAY BE 90 AUTHENTICATED BY HANDWRITTEN SIGNATURES OR HANDWRITTEN INITIALS. 91 THEY ALSO MAY BE AUTHENTICATED BY ELECTRONIC SIGNATURES OR 92 COMPUTER-GENERATED SIGNATURE CODES IF ALL OF THE FOLLOWING APPLY: (1) THE HEALTH CARE FACILITY ADOPTS A POLICY THAT PERMITS 95 THE USE OF ELECTRONIC SIGNATURES OR COMPUTER-GENERATED SIGNATURE 96 CODES; (2) THE FACILITY'S ELECTRONIC SIGNATURE OR 99 COMPUTER-GENERATED SIGNATURE CODE SYSTEM UTILIZES A TWO-LEVEL OR BIOMETRIC ACCESS MECHANISM THAT ASSIGNS A UNIQUE IDENTIFIER TO 100 EACH USER; (3) THE FACILITY TAKES STEPS TO SAFEGUARD AGAINST USE OF A 103 UNIQUE IDENTIFIER BY ANY INDIVIDUAL OTHER THAN THE ONE TO WHOM IT 104 3 IS ASSIGNED; (4) THE SYSTEM INCLUDES A PROCESS TO VERIFY THAT THE 107 INDIVIDUAL AFFIXING THE ELECTRONIC SIGNATURE OR COMPUTER-GENERATED SIGNATURE CODE HAS REVIEWED THE CONTENTS OF 108 THE ENTRY AND DETERMINED THAT THEY ARE WHAT THAT INDIVIDUAL 109 INTENDED; (5) THE POLICY ADOPTED BY THE FACILITY PURSUANT TO 112 DIVISION (B)(1) OF THIS SECTION PRESCRIBES ALL OF THE FOLLOWING: 113 (a) A PROCEDURE BY WHICH EACH USER OF THE SYSTEM MUST 115 CERTIFY IN WRITING THAT THE USER WILL KEEP THE USER'S UNIQUE 117 IDENTIFIER STRICTLY CONFIDENTIAL; 118 (b) PENALTIES FOR MISUSING THE SYSTEM OR A UNIQUE 121 IDENTIFIER ALLOWING ACCESS TO IT; (c) TRAINING THAT THE FACILITY MUST PROVIDE TO ALL USERS 123 OF THE SYSTEM AND THAT INCLUDES AN EXPLANATION OF THE APPROPRIATE 125 USE OF THE SYSTEM AND THE CONSEQUENCES FOR NONCOMPLIANCE WITH THE 127 FACILITY'S CONFIDENTIALITY AND SECURITY POLICIES. THE USE OF AN ELECTRONIC SIGNATURE OR COMPUTER-GENERATED 129 SIGNATURE CODE IN ACCORDANCE WITH THIS SECTION SHALL BE 130 CONSIDERED FOR ALL LEGAL PURPOSES TO BE THE SAME AS A HANDWRITTEN 131 SIGNATURE OR HANDWRITTEN INITIALS.