JD Key Consulting Logo
Signed Into Law
Signed June 20, 2025Effective 2025-09-01
HB4224

Regular Session

Relating to information regarding consumer access to health care records.

Government Affairs & Regulatory Compliance Analysis

HB4224: Government Affairs Overview

HB4224 amends the Texas Medical Records Privacy Act to mandate that all patient-facing healthcare entities prominently post specific instructions regarding medical record requests and consumer complaints. This requirement applies to both physical facilities and entity websites, creating a strict liability standard for failure to notify consumers of their rights. Back-office entities handling claims or data analysis exclusively are exempt, but all direct care providers must comply to avoid civil penalties.

Rep. Lacey Hull·House Bill·Regular Session

Moderate
Low Cost
Effective:2025-09-01
Business Impact

Who HB4224 Affects

This legislation has regulatory implications for the following Texas businesses and organizations:

Regulatory Priority: moderate

Notable regulatory updates (effective 2025-09-01). Consider how these changes may affect your operations.

🏥

Healthcare

Affected business types:

  • Hospitals
  • Healthcare systems
  • Medical practices
  • Health insurance providers
View all healthcare legislation

Key Operational Considerations

  • 1Front Desk Staff: Staff must be trained to point patients to the signage rather than giving ad-hoc verbal instructions.
  • 2Web Development: IT or Marketing teams must add a permanent, visible link (e.g., "Medical Records Policy") to the website footer. This cannot be buried in a general "Privacy Policy" PDF.

Estimated Cost Impact

lowMinimal cost impact anticipated.

Enforcing Agencies

Need Government Relations Support?

JD Key Consulting provides government affairs and regulatory strategy services. We help businesses navigate Texas agencies, understand legislative impacts, and advocate for their interests.

Need Help Navigating This Legislation?

JD Key Consulting provides strategic guidance on Texas regulatory compliance and legislative impact for your business.

HB4224
Relating to information regarding consumer access to health care records.
Moderate Urgency
Unanimous Passage
House Vote149 - 0
YEA
100% in favor149 voting
Senate Vote31 - 0
YEA
100% in favor31 voting
Cost Impact
Low
Effective
2025-09-01
Enforcing Agencies
Texas Attorney GeneralTexas Medical Board
Primary Author: Rep. Lacey Hull
89th Texas Legislature
jdkey.com
01

Compliance Analysis

Key implementation requirements and action items for compliance with this legislation

Implementation Timeline

  • Effective Date: September 1, 2025
  • Compliance Deadline: August 1, 2025 (Recommended operational target to ensure signage is installed and websites are indexed prior to the effective date).
  • Agency Rulemaking: The statute is self-executing and does not require agency rulemaking to take effect. While the Texas Medical Board or Attorney General *may* issue guidance, businesses must not wait for model forms.

Immediate Action Plan

  • Identify Authority: Verify the current contact information for your specific licensing board (e.g., Texas Medical Board, State Board of Dental Examiners) to include on the sign.
  • Draft Notice: Create a "Consumer Access to Records" document containing: (1) Your specific request procedures/fees, (2) Licensing board contact info, and (3) Instructions for filing a complaint under Section 181.103.
  • Digital Update: Post this text to your website immediately.
  • Physical Install: Order and install signage for all waiting rooms and check-in stations by August 2025.

Operational Changes Required

Contracts

  • Release of Information (ROI) Vendors: If you outsource record retrieval to a third party (e.g., Ciox, MRO), review your Master Services Agreements. You must obtain their specific retrieval protocols to satisfy the "detailed instructions" requirement of the statute. You cannot simply post "Contact our vendor" without providing the statutory details.

Hiring/Training

  • Front Desk Staff: Staff must be trained to point patients to the signage rather than giving ad-hoc verbal instructions.
  • Web Development: IT or Marketing teams must add a permanent, visible link (e.g., "Medical Records Policy") to the website footer. This cannot be buried in a general "Privacy Policy" PDF.

Reporting & Record-Keeping

  • Compliance Logging: Create a "Compliance Evidence" file. Archive a date-stamped photograph of the physical sign in your lobby and a screenshot of the website update. This is your primary defense against "failure to notify" complaints filed with the Attorney General.

Fees & Costs

  • Budget Impact: Low. Costs are limited to physical signage printing and minor website development hours.
  • Penalty Risk: Non-compliance triggers Texas Medical Records Privacy Act civil penalties, which generally range from $3,000 to $250,000 depending on the nature of the violation.

Strategic Ambiguities & Considerations

  • "Prominently Post": The statute does not define font size or dimensions. Guidance: Apply the "Reasonable Person" standard. If a patient requires reading glasses to see the text from three feet away, it is non-compliant. Use at least 14-point font for body text and place signs at eye level in high-traffic intake/discharge areas.
  • "Detailed Instructions": The law requires more than a phone number. Guidance: You must list the specific steps (e.g., "Submit Form X," "Pay Fee Y," "Allow 15 days"). If your posted instructions are vague, a consumer may validly claim you failed to provide the "detailed" instructions required by law.

Need Compliance Guidance on This Legislation?

JD Key Consulting specializes in Texas regulatory compliance strategy. Work directly with James Dickey—former Chairman of the Republican Party of Texas—to understand this bill's impact on your operations and develop an actionable compliance plan.

Schedule a Consultation

Information presented is for general knowledge only and is provided without warranty, express or implied. Consult qualified government affairs professionals and legal counsel before making compliance decisions.

02

Legislative Timeline

This bill's path through the Texas Legislature

Filed
Mar 10, 2025
Passed House
May 6, 2025
Passed Senate
May 25, 2025
Signed
Jun 20, 2025
Effective
Sep 1, 2025
TopicsConsumer ProtectionElectronic Information SystemsHealth Care ProvidersHealthHealth--generalHospitalsMedical RecordsOpen Records
03

House Authors

Rep. Lacey HullRepublican · Primary Author
Joint Authors
Coauthors (2)

Senate Sponsor

Sen. Lois KolkhorstRepublican · Primary Sponsor

Bill Text(with markup)

View bill text in multiple formats on Texas Legislature website

Fiscal NoteView Original

Related Legislation

Explore more bills from this author and on related topics

More from Rep. Lacey Hull

View all bills by Rep. Lacey Hull

Related by Topic

View more Consumer Protection legislation
Quick Reference

Frequently Asked Questions

Common questions about HB4224

Q

What does Texas HB4224 do?

HB4224 amends the Texas Medical Records Privacy Act to mandate that all patient-facing healthcare entities prominently post specific instructions regarding medical record requests and consumer complaints. This requirement applies to both physical facilities and entity websites, creating a strict liability standard for failure to notify consumers of their rights. Back-office entities handling claims or data analysis exclusively are exempt, but all direct care providers must comply to avoid civil penalties.

Q

Who authored HB4224?

HB4224 was authored by Texas Representative Lacey Hull during the Regular Session.

Q

When was HB4224 signed into law?

HB4224 was signed into law by Governor Greg Abbott on June 20, 2025.

Q

Which agencies enforce HB4224?

HB4224 is enforced by Texas Attorney General and Texas Medical Board (and relevant licensing authorities for specific covered entities).

Q

How significant are the changes in HB4224?

The regulatory priority for HB4224 is rated as "moderate". Businesses and organizations should review the legislation to understand potential impacts.

Q

What is the cost impact of HB4224?

The cost impact of HB4224 is estimated as "low". This may vary based on industry and implementation requirements.

Q

What topics does HB4224 address?

HB4224 addresses topics including consumer protection, electronic information systems, health care providers, health and health--general.

Q

What are the key dates for HB4224?

Key dates for HB4224: Effective date is 2025-09-01. Consult with legal counsel regarding applicability.

Q

What are the penalties under HB4224?

HB4224 establishes the following penalties: civil penalty of Variable under existing Chapter 181 (Texas Medical Records Privacy Act) schedules (generally $3,000 to $250,000 depending on intent and frequency) for Failure to prominently post required instructions regarding records requests, licensing contacts, and complaints on website and at facilities.. Consult with legal counsel for specific applicability to your situation.

Q

Which Texas businesses are affected by HB4224?

HB4224 primarily affects healthcare providers and medical facilities. These businesses should review the legislation with their legal and compliance teams to understand potential impacts.

Need Strategic Guidance on This Legislation?

JD Key Consulting is an Austin, Texas-based government affairs firm led by James Dickey, former Chairman of the Republican Party of Texas. We specialize in Texas regulatory compliance and legislative strategy for data centers, energy, banking, and manufacturing.

Legislative data provided by LegiScanLast updated: January 11, 2026