HB 1161

Government Data Collection and Dissemination Practices Act; dissemination of personal information to federal government; civil penalties. Provides that any agency or political subdivision of the Commonwealth shall only disseminate personal information (i) to the extent necessary to comply with state or federal law, including the federal Health Insurance Portability and Accountability Act; (ii) to the extent necessary to carry out the administration of a state or federal program pursuant to state or federal law; (iii) to comply with a subpoena, court order, or administrative proceeding; (iv) to the extent necessary to ensure fulfillment of the obligations of a purchase or contract made in accordance with the Virginia Public Procurement Act; or (v) when the data subject has given consent. The bill authorizes a court, in the case of a willful and knowing violation, to subject a specific public officer, appointee, or employee of any agency to civil penalties.