 |
ARIZONA STATE SENATE
Fifty-Seventh Legislature, Second Regular Session
AMENDED
personal identifying information; disclosure; prohibition
Purpose
Prohibits the Department of Health Services (DHS) from selling or disclosing personal identifying information of a licensee or certificate holder, including an emergency medical care technician (EMCT), for commercial purposes, unless specified conditions apply
DHS is responsible for regulating emergency medical services in Arizona, which includes defining the scope of practice and certification requirements for EMCTs, accrediting EMCT training programs, conducting background checks and investigating complaints. An EMCT is an individual who has been certified by DHS as an emergency medical technician, advanced emergency medical technician, emergency medical technician I-99 or a paramedic (A.R.S. Title 36, Chapter 21.1).
Information, documents and records received by or prepared by DHS in connection with an investigation that relates to EMCTs are confidential and are not subject to public inspection or civil discovery. The results of the investigation and DHS's final decision are available to the public only after the investigation is completed and the investigation file is closed. DHS may release any public documents that do not include confidential information (DHS).
All public officers and public bodies must maintain all public records reasonably necessary or appropriate to maintain an accurate knowledge of their official activities and activities that are supported by monies from the state or a political subdivision of the state. Each public officer or public body is responsible for the preservation, maintenance and care of the respective officer's or body's public records. A person may make a public records request as authorized by statute by requesting to examine or be provided copies, printouts or photographs of any public record. The custodian of public records must promptly furnish the public records request and access to a public record is deemed denied if a custodian fails to promptly respond to the request in the manner prescribed by statute (A.R.S. §§ 39-101 and 39-121.01).
There is no anticipated fiscal impact to the state General Fund associated with this legislation.
Provisions
1. Prohibits DHS from selling any personal identifying information of any individual licensed or certified by DHS regarding public health or safety or professions and occupations without the individual's consent.
2. Prohibits DHS from selling or disclosing any personal identifying information of an EMCT.
3. Declares the personal identifying information of a DHS licensee or certificate holder, including an EMCT, confidential and exempt from public records laws if the request is made for a commercial purpose.
4. Allows DHS to disclose personal identifying information of an EMCT if:
a) the EMCT provides consent, including the information that may be disclosed and the purposes for which disclosure is authorized; or
b) the information has been de-identified or aggregated and does not reasonably allow for identification of an EMCT.
5. Specifies that DHS is not prohibited from:
a) sharing information relating to EMCT licensure or certification with another regulatory entity, including a commission that administers a licensure compact; or
b) disclosing information relating to an EMCT's licensing history or record of disciplinary actions.
6. Defines personal identifying information to include:
a) a social security number, passport number, driver license number or taxpayer identification number;
b) a personal address, personal email address or personal telephone number;
c) a biometric record, including a photographic image, fingerprint, retinal scan, voice signature or facial geometry; and
d) bulk information that when combined with other request details may pose a privacy risk, including date of birth, place of birth, race, religion, geographic indicators, employment information and education information.
7. Becomes effective on the general effective date.
Amendments Adopted by Committee
1. Stipulates that the personal identifying information of an EMCT is confidential and exempt from public records laws if the request is made specifically for a commercial purpose.
2. Modifies the definition of personal identifying information.
Amendments Adopted by the House of Representatives
1. Expands the prohibition on DHS selling personal identifying information of an EMCT to apply to any individual licensed or certified by DHS.
2. Specifies that DHS may share EMCT licensure information with regulatory entities and disclose an EMCT's licensing history and disciplinary records.
3. Modifies the definition of personal identifying information.
4. Makes conforming changes.
Senate Action House Action
HHS 2/11/26 DPA 6-0-1 HHS 3/9/26 DP 10-0-0-2
3rd Read 2/25/26 26-0-4 3rd Read 4/13/26 51-3-6
Prepared by Senate Research
April 14, 2026
MM/MS/hk