Page 4

(s) A funeral service practitioner licensed under ORS chapter 692 or an employee of the funeral service practitioner; (t) A health care facility as defined in ORS 442.015; (u) A home health agency as defined in ORS 443.014; (v) A hospice program as defined in ORS 443.850; (w) A clinical laboratory as defined in ORS 438.010; (x) A pharmacy as defined in ORS 689.005; and (y) Any other person or entity that furnishes, bills for or is paid for health care in the normal course of business. (6) “Health information” means any oral or written information in any form or medium that: (a) Is created or received by a covered entity, a public health authority, an employer, a life insurer, a school, a university or a health care provider that is not a covered entity; and (b) Relates to: (A) The past, present or future physical or mental health or condition of an individual; (B) The provision of health care to an individual; or (C) The past, present or future payment for the provision of health care to an individual. (7) “Health insurer” means an insurer as defined in ORS 731.106 who offers: (a) A health benefit plan as defined in ORS 743B.005; (b) A short term health insurance policy, the duration of which does not exceed three months including renewals; (c) A student health insurance policy; (d) A Medicare supplemental policy; or (e) A dental only policy. (8) “Individually identifiable health information” means any oral or written health information in any form or medium that is: (a) Created or received by a covered entity, an employer or a health care provider that is not a covered entity; and (b) Identifiable to an individual, including demographic information that identifies the individual, or for which there is a reasonable basis to believe the information can be used to identify an indi- vidual, and that relates to: (A) The past, present or future physical or mental health or condition of an individual; (B) The provision of health care to an individual; or (C) The past, present or future payment for the provision of health care to an individual. (9) “Payment” includes but is not limited to: (a) Efforts to obtain premiums or reimbursement; (b) Determining eligibility or coverage; (c) Billing activities; (d) Claims management; (e) Reviewing health care to determine medical necessity; (f) Utilization review; and (g) Disclosures to consumer reporting agencies. (10) “Personal representative” includes but is not limited to: (a) A person appointed as a guardian under ORS 125.305, 419B.372, 419C.481 or 419C.555 with authority to make medical and health care decisions; (b) A person appointed as a health care representative under ORS 127.505 to 127.660 or a rep- resentative under ORS 127.700 to 127.737 to make health care decisions or mental health treatment decisions; (c) A person appointed as a personal representative under ORS chapter 113; and (d) A person described in ORS 192.573. (11)(a) “Protected health information” means individually identifiable health information that is maintained or transmitted in any form of electronic or other medium by a covered entity. (b) “Protected health information” does not mean individually identifiable health information in: Enrolled House Bill 3352 (HB 3352-B) Page 4