Request to create, operate, and maintain data base; requirements; publication of decision; contract; ensure compliance of privacy laws

Sec. 4. (a) After December 31, 2021, the department shall issue a request for an entity that is not a state agency or political subdivision to create, operate, and maintain the data base under this chapter. In addition to the requirements of IC 5-22-9, the request for proposals must include the considerations contained in the request for information under section 3 of this chapter. (b) The request for proposals must state that the data base's purpose is to facilitate the following: (1) Identifying health care needs and informing health care policy. (2) Comparing costs between various treatment settings and approaches. (3) Providing information to consumers and purchasers of health care. (4) Improving the quality and affordability of patient health care and health care coverage. (c) The department shall publish the department's decision concerning the submissions not later than April 1, 2022, on the department's Internet web site. (d) If the department accepts a submission for the request for proposals, the department shall enter into a contract with the person to act as administrator of the data base and develop the data base. (e) The administrator shall ensure that the data base is secure and compliant with the federal Health Insurance Portability and Accountability Act (HIPAA).