117 STAT. 2000
PUBLIC LAW 108–159—DEC. 4, 2003 ‘‘(g) PROTECTION OF MEDICAL INFORMATION.— ‘‘(1) LIMITATION ON CONSUMER REPORTING AGENCIES.—A consumer reporting agency shall not furnish for employment purposes, or in connection with a credit or insurance transaction, a consumer report that contains medical information about a consumer, unless— ‘‘(A) if furnished in connection with an insurance transaction, the consumer affirmatively consents to the furnishing of the report; ‘‘(B) if furnished for employment purposes or in connection with a credit transaction— ‘‘(i) the information to be furnished is relevant to process or effect the employment or credit transaction; and ‘‘(ii) the consumer provides specific written consent for the furnishing of the report that describes in clear and conspicuous language the use for which the information will be furnished; or ‘‘(C) the information to be furnished pertains solely to transactions, accounts, or balances relating to debts arising from the receipt of medical services, products, or devises, where such information, other than account status or amounts, is restricted or reported using codes that do not identify, or do not provide information sufficient to infer, the specific provider or the nature of such services, products, or devices, as provided in section 605(a)(6). ‘‘(2) LIMITATION ON CREDITORS.—Except as permitted pursuant to paragraph (3)(C) or regulations prescribed under paragraph (5)(A), a creditor shall not obtain or use medical information pertaining to a consumer in connection with any determination of the consumer’s eligibility, or continued eligibility, for credit. ‘‘(3) ACTIONS AUTHORIZED BY FEDERAL LAW, INSURANCE ACTIVITIES AND REGULATORY DETERMINATIONS.—Section 603(d)(3) shall not be construed so as to treat information or any communication of information as a consumer report if the information or communication is disclosed— ‘‘(A) in connection with the business of insurance or annuities, including the activities described in section 18B of the model Privacy of Consumer Financial and Health Information Regulation issued by the National Association of Insurance Commissioners (as in effect on January 1, 2003); ‘‘(B) for any purpose permitted without authorization under the Standards for Individually Identifiable Health Information promulgated by the Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act of 1996, or referred to under section 1179 of such Act, or described in section 502(e) of Public Law 106–102; or ‘‘(C) as otherwise determined to be necessary and appropriate, by regulation or order and subject to paragraph (6), by the Commission, any Federal banking agency or the National Credit Union Administration (with respect to any financial institution subject to the jurisdiction of such agency or Administration under paragraph (1), (2), or (3) of section 621(b), or the applicable State insurance
VerDate 11-MAY-2000
10:15 Aug 27, 2004
Jkt 019194
PO 00000
Frm 00952
Fmt 6580
Sfmt 6581
D:\STATUTES\2003\19194PT2.001
APPS10
PsN: 19194PT2
�
