🟡Relating to patient data maintained by pharmacy benefit managers.

HB 3233

🟡 HB 3233: Restricting Offshore Storage of Texans’ Prescription Data

What it says it does:
HB 3233 says pharmacy benefit managers cannot store or process Texans’ prescription drug data in foreign countries. The goal is to protect patient information from hostile foreign actors and reduce the risk of data breaches.

What it actually changes:
The final law applies only to contracts signed or renewed after September 1, 2025, leaving existing agreements able to continue offshore storage for years. It allows storage in U.S. territories and grants no new enforcement powers to the Texas Department of Insurance.

Who is pushing for it:
Industry groups like the Pharmaceutical Care Management Association and the Texas Pharmacy Business Council, medical trade groups, and advocacy organizations including Americans for Prosperity and The LIBRE Initiative actively supported the bill during committee hearings.

Who benefits:
Large PBMs can continue using offshore servers in non-terrorist-designated countries without disruption. Trade associations maintain influence over member practices. Lawmakers can claim action on data security while limiting immediate operational impact on the industry.

Who gets left out or exposed:
Texans whose prescription and medical data may still be stored overseas until contracts renew. Patients in rural or underserved areas rely on PBMs but have no direct oversight. The public has limited visibility into where data is stored or compliance status.

Why this matters long term:
The law outsources privacy enforcement to federal terrorism lists and delays protections through contract grandfathering. This weakens Texas’ control over patient data security and leaves loopholes for PBMs to exploit for years.

What to watch next:
Future PBM contracts could continue offshore storage. The Texas Department of Insurance may need additional authority or resources to enforce the law. Federal policy changes could shift which countries are restricted, impacting Texans’ data.

Bottom line:
HB 3233 appears protective on paper but leaves significant gaps in enforcement, contract coverage, and territorial security standards. Texans’ sensitive health information remains at risk without stronger oversight and faster implementation.

#HB3233 #TexasPolicy #HealthData #Pharmacy #WatchTheRules