April 19, 2004

Ms. Jacqueline Cullom Murphy
Special Counsel
Hays County Commissioners Court
111 East San Antonio
San Marcos, Texas 78666

OR2004-3141

Dear Ms. Murphy:

You ask whether certain information is subject to required public disclosure under chapter 552 of the Government Code. Your request was assigned ID# 199914.

Hays County (the "county") received a request for information pertaining to county employees who have been provided additional leave time under the county employee sick leave pool policy. You claim that the requested information may be confidential under the federal Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), sections 1320d through 1320d-8 of title 42 of the United States Code. We have considered your claims and reviewed the submitted information.

Section 552.101 of the Government Code excepts from disclosure "information considered to be confidential by law, either constitutional, statutory, or by judicial decision," and encompasses information made confidential by other statutes. At the direction of Congress, the Secretary of Health and Human Services ("HHS") promulgated regulations setting privacy standards for medical records, which HHS issued as the Federal Standards for Privacy of Individually Identifiable Health Information. See 42 U.S.C. § 1320d-2 (Supp. IV 1998) (historical & statutory note); Standards for Privacy of Individually Identifiable Health Information, 45 C.F.R. Pts. 160, 164 ("Privacy Rule"); see also Attorney General Opinion JC-0508 at 2 (2002). These standards govern the releasability of protected health information by a covered entity. See 45 C.F.R. pts. 160, 164. Under these standards, a covered entity may not use or disclose protected health information, excepted as provided by parts 160 and 164 of the Code of Federal Regulations. 45 C.F.R. § 164.502(a).

This office recently addressed the interplay of the Privacy Rule and the Public Information Act (the "Act"). See Open Records Decision No. 681 (2004). In that decision, we noted that section 164.512 of title 45 of the Code of Federal Regulations provides that a covered entity may use or disclose protected health information to the extent that such use or disclosure is required by law and the use or disclosure complies with and is limited to the relevant requirements of such law. See 45 C.F.R. § 164.512(a)(1). We further noted that the Act "is a mandate in Texas law that compels Texas governmental bodies to disclose information to the public." See Open Records Decision No. 681 at 8 (2004); see also Gov't Code §§ 552.002, .003, .021. We therefore held that the disclosures under the Act come within section 164.512(a). Consequently, the Privacy Rule does not make information confidential for the purpose of section 552.101 of the Government Code. Open Records Decision No. 681 at 9 (2004); see also Open Records Decision No. 478 (1987) (as general rule, statutory confidentiality requires express language making information confidential). Because the Privacy Rule does not make confidential information that is subject to disclosure under the Act, the county may withhold requested protected health information from the public only if an exception in subchapter C of the Act applies.

Section 552.101 also encompasses the doctrine of common-law privacy, which protects information if (1) the information contains highly intimate or embarrassing facts, the publication of which would be highly objectionable to a reasonable person, and (2) the information is not of legitimate concern to the public. Industrial Found. v. Texas Indus. Accident Bd., 540 S.W.2d 668, 685 (Tex. 1976), cert. denied, 430 U.S. 931 (1977).

The type of information considered intimate and embarrassing by the Texas Supreme Court in Industrial Foundation included information relating to sexual assault, pregnancy, mental or physical abuse in the workplace, illegitimate children, psychiatric treatment of mental disorders, attempted suicide, and injuries to sexual organs. 540 S.W.2d at 683. In addition, this office has found that some kinds of medical information or information indicating disabilities or specific illnesses are excepted from required public disclosure under common-law privacy. See Open Records Decision Nos. 470 (1987) (illness from severe emotional and job-related stress), 455 (1987) (prescription drugs, illnesses, operations, and physical handicaps). Upon review, we determine that a portion of the submitted information is protected by privacy. We have marked the information that the county must withhold pursuant to section 552.101 of the Government Code in conjunction with common-law privacy. The remainder of the submitted information must be released to the requestor.

This letter ruling is limited to the particular records at issue in this request and limited to the facts as presented to us; therefore, this ruling must not be relied upon as a previous determination regarding any other records or any other circumstances.

This ruling triggers important deadlines regarding the rights and responsibilities of the governmental body and of the requestor. For example, governmental bodies are prohibited from asking the attorney general to reconsider this ruling. Gov't Code § 552.301(f). If the governmental body wants to challenge this ruling, the governmental body must appeal by filing suit in Travis County within 30 calendar days. Id. § 552.324(b). In order to get the full benefit of such an appeal, the governmental body must file suit within 10 calendar days. Id. § 552.353(b)(3), (c). If the governmental body does not appeal this ruling and the governmental body does not comply with it, then both the requestor and the attorney general have the right to file suit against the governmental body to enforce this ruling. Id. § 552.321(a).

If this ruling requires the governmental body to release all or part of the requested information, the governmental body is responsible for taking the next step. Based on the statute, the attorney general expects that, within 10 calendar days of this ruling, the governmental body will do one of the following three things: 1) release the public records; 2) notify the requestor of the exact day, time, and place that copies of the records will be provided or that the records can be inspected; or 3) notify the requestor of the governmental body's intent to challenge this letter ruling in court. If the governmental body fails to do one of these three things within 10 calendar days of this ruling, then the requestor should report that failure to the attorney general's Open Government Hotline, toll free, at (877) 673-6839. The requestor may also file a complaint with the district or county attorney. Id. § 552.3215(e).

If this ruling requires or permits the governmental body to withhold all or some of the requested information, the requestor can appeal that decision by suing the governmental body. Id. § 552.321(a); Texas Dep't of Pub. Safety v. Gilbreath, 842 S.W.2d 408, 411 (Tex. App.--Austin 1992, no writ).

Please remember that under the Act the release of information triggers certain procedures for costs and charges to the requestor. If records are released in compliance with this ruling, be sure that all charges for the information are at or below the legal amounts. Questions or complaints about over-charging must be directed to Hadassah Schloss at the Texas Building and Procurement Commission at (512) 475-2497.

If the governmental body, the requestor, or any other person has questions or comments about this ruling, they may contact our office. We note that a third party may challenge this ruling by filing suit seeking to withhold information from a requestor. Gov't Code § 552.325. Although there is no statutory deadline for contacting us, the attorney general prefers to receive any comments within 10 calendar days of the date of this ruling.

Sincerely,

David R. Saldivar
Assistant Attorney General
Open Records Division
DRS/seg
Ref: ID# 199914
Enc: Submitted documents

c: Mr. Troy Meinke
209 Spring Fawn
Cibolo, Texas 78108
(w/o enclosures)