A BILL TO BE ENTITLED
AN ACT to provide for greater transparency in the reporting of claim information under health benefit plans.
The General Assembly of North Carolina enacts:
SECTION 1.  Chapter 58 of the General Statutes is amended by adding a new Article to read:
"Article 68B.
"Health Insurance Claims Transparency.
"§ 58‑68B‑1.  Short title.
This Article shall be known as the "Health Insurance Claims Transparency Act."
"§ 58‑68B‑2.  Definitions.
The following definitions apply in this Article:
(1)	Employer. – As defined in 29 U.S.C. § 1002(5).
(2)	Governmental entity. – Any State department, institution, agency, or any political subdivision of the State.
(3)	Group health plan. – As defined in 45 C.F.R. § 160.103, except that the term does not include disability income or long‑term care insurance.
(4)	Health insurance issuer. – As defined in 45 C.F.R. § 160.103.
(5)	Plan. – An employee welfare benefit plan, as defined in 29 U.S.C. § 1002(1).
(6)	Plan administrator. – An administrator, as defined in 29 U.S.C. § 1002(16)(A).
(7)	Plan sponsor. – As defined in 29 U.S.C. § 1002(16)(B).
(8)	Protected health information. – As defined in 45 C.F.R. § 160.103.
"§ 58‑68B‑3.  Applicability to governmental entities.
(a)	This Article applies to a governmental entity that enters into a contract with a health insurance issuer that results in the health insurance issuer delivering, issuing for delivery, or renewing a group health plan.
(b)	For purposes of this Article, a health insurance issuer shall treat a governmental entity described by subsection (a) of this section as a plan sponsor or plan administrator.
(c)	A report of claim information provided under this section to a governmental entity is confidential and is not a public record under Chapter 132 of the General Statutes.
"§ 58‑68B‑4.  Response to a request for claim information.
(a)	Not later than the thirtieth calendar day after the date a health insurance issuer receives a written request for a written report of claim information from a plan, plan sponsor, or plan administrator, the health insurance issuer shall provide the requesting party the report, subject to subsections (d), (e), and (f) of this section. The health insurance issuer is not obligated to provide a report under this subsection regarding a particular employer or group health plan more than twice in any 12‑month period.
(b)	A health insurance issuer shall provide the report of claim information required under subsection (a) of this section using one of the following methods:
(1)	A written report.
(2)	An electronic file transmitted by secure electronic mail or a file transfer protocol site.
(3)	By making the required information available through a secure Web site or Web portal system accessible by the requesting plan, plan sponsor, or plan administrator.
(c)	A report of claim information required under subsection (a) of this section must contain all information available to the health insurance issuer that is responsive to the request. To ensure responsiveness to the request, the report of claim information provided under subsection (a) of this section must meet all of the following requirements:
(1)	A report of claim information must include information for the shorter of the following time periods:
a.	A 36‑month period preceding the date of the report.
b.	The period specified by subdivision (2) of this subsection, if applicable.
c.	The entire period of coverage.
(2)	Subject to subsections (d), (e), and (f) of this section, a report of claim information must include all of the following information:
a.	Aggregate paid claims experience by month, including claims experience for medical, dental, and pharmacy benefits, as applicable.
b.	Total premium paid by month.
c.	Total number of covered employees on a monthly basis by coverage tier, including whether coverage was for any of the following:
1.	An employee only.
2.	An employee with dependents only.
3.	An employee with a spouse only.
4.	An employee with a spouse and dependents.
d.	The total dollar amount of claims pending as of the date of the report.
e.	A separate description and individual claims report for any individual whose total paid claims exceed fifteen thousand dollars ($15,000) during the 12‑month period preceding the date of the report, including all of the following information related to the claims for that individual:
1.	A unique identifying number, characteristic, or code for the individual.
2.	The amounts paid.
3.	Dates of service.
4.	Applicable procedure codes and diagnosis codes.
(3)	A report of claims information shall include a statement describing any precertification requests for hospital stays of five days or longer that were made during the 30‑day period preceding the date of the report of claims information that have not yet resulted in a claim.
(d)	A health insurance issuer may not disclose protected health information in a report of claim information if the health insurance issuer is prohibited from disclosing that information under another state or federal law that imposes more stringent privacy restrictions than those imposed under federal law under the Health Insurance Portability and Accountability Act of 1996, P.L. 104‑191, as amended. To withhold information in accordance with this subsection, the health insurance issuer must do both of the following:
(1)	Notify the plan, plan sponsor, or plan administrator requesting the report that information is being withheld.
(2)	Provide to the plan, plan sponsor, or plan administrator a list of categories of claim information that the health insurance issuer has determined are subject to the more stringent privacy restrictions under another state or federal law.
(e)	A plan sponsor is entitled to receive protected health information under this section and under G.S. 58‑68B‑5 only after an appropriately authorized representative of the plan sponsor makes to the health insurance issuer a certification substantially similar to the following certification:
"I hereby certify that the plan documents comply with the requirements of 45 C.F.R. Section 164.504(f)(2) and that the plan sponsor will safeguard and limit the use and disclosure of protected health information that the plan sponsor may receive from the group health plan to perform the plan administration functions."
(f)	A plan sponsor that does not provide the certification required by subsection (e) of this section is not entitled to receive the protected health information described by sub‑subdivision e. of subdivision (2) of subsection (c) of this section and G.S. 58‑68B‑5 but is entitled to receive a report of claim information that includes the remaining nonprotected health information described by subsection (c) of this section.
(g)	In the case of a request for information made after the date of termination of coverage, the report provided as required under subsection (a) of this section must contain all information available to the health insurance issuer as of the date of the report that is responsive to the request, including the information described by subsection (c) of this section for either (i) the period described in subsection (c) of this section preceding the date of termination of coverage or (ii) the entire policy period, whichever period is shorter. The report may not include protected health information unless a certification has been provided in accordance with subsection (e) of this section.
(h)	A plan, plan sponsor, or plan administrator must request a report under subsection (a) of this section on or before the second anniversary of the date of termination of coverage under a group health plan issued by the health benefit plan issuer.
"§ 58‑68B‑5.  Requests for additional information.
(a)	Not later than the tenth business day after a report required under G.S. 58‑68B‑4(a) is received, a plan, plan sponsor, or plan administrator may make a written request to the health insurance issuer for additional information in accordance with this section for specified individuals.
(b)	With respect to a request for additional information concerning specified individuals for whom claims information has been provided under G.S. 58‑68B‑4(c)(2)e., the health insurance issuer shall provide additional information on the prognosis or recovery if available and, for individuals in active case management, the most recent case management information, including any future expected costs and treatment plan, that relates to the claims for that individual.
(c)	The health insurance issuer must respond to the request for additional information under this section not later than the fifteenth business day after the date the request is made unless the requesting plan, plan sponsor, or plan administrator agrees to additional time.
(d)	The health insurance issuer is not required to produce the report described by this section unless a certification has been provided in accordance with G.S. 58‑68B‑4(e).
"§ 58‑68B‑10.  Compliance with this Article does not create liability.
(a)	A health insurance issuer that releases information, including protected health information, in accordance with this Article has not violated a standard of care and is not liable for civil damages resulting from releasing that information.
(b)	A health insurance issuer that releases information, including protected health information, in accordance with this Article is not subject to criminal prosecution for releasing that information.
"§ 58‑68B‑15.  Penalties.
A health insurance issuer that does not comply with any provision of this Article is subject to civil penalties under G.S. 58‑2‑70."
SECTION 2.  This act becomes effective October 1, 2017, and applies to reports of claim information requested on or after that date.