1. (1) As used in this section:

   1. (a) "Insurer" means:

      1. (i) insurers governed by this part as described in Section 31A-22-600, and includes:

         1. (A) a health maintenance organization; and
         2. (B) a third-party administrator that is subject to this title; and
      2. (ii) notwithstanding Subsection 31A-1-103(3)(f) and Section 31A-22-600, a health, dental, medical, Medicare supplement, or conversion program offered under Title 49, Chapter 20, Public Employees' Benefit and Insurance Program Act.
   2. (b) "Publicly display" or "publicly post" means to intentionally communicate or otherwise make available to the general public.

2. (2) An insurer or its subcontractors, including a pharmacy benefit manager, may not do any of the following:

   1. (a) publicly display or publicly post in any manner an individual's Social Security number; or
   2. (b) print an individual's Social Security number on any card required for the individual to access products or services provided or covered by the insurer.
3. (3) This section does not prevent the collection, use, or release of a Social Security number as required by state or federal law, or the use of a Social Security number for internal verification or administrative purposes, or the release of a Social Security number to a health care provider for claims administration purposes, or as part of the verification, eligibility, or payment process.
4. (4) If a federal law takes effect requiring the United States Department of Health and Human Services to establish a national unique patient health identifier program, an insurer that complies with the federal law shall be considered in compliance with this section.
5. (5) An insurer shall comply with the provisions of this section by July 1, 2004.

6. (6)

   1. (a) An insurer may obtain an extension for compliance with the requirements of this section in accordance with Subsections (6)(b) and (c).

   2. (b) The request for extension:

      1. (i) shall be submitted in writing to the department prior to July 1, 2004; and
      2. (ii) shall provide an explanation as to why the insurer cannot comply with the requirements of this section by July 1, 2004.

   3. (c) The commissioner shall grant a request for extension:

      1. (i) for a period of time not to exceed March 1, 2005; and
      2. (ii) if the commissioner finds that the explanation provided under Subsection (6)(b)(ii) is a reasonable explanation.

Amended by Chapter 297, 2011 General Session