Amend CSSB 1237 as follows: (1) In SECTION 1, strike the recital (house committee printing, page 1, lines 5-6), and substitute the following: SECTION 1. Section 1, Article 21.07-6, Insurance Code, is amended by amending Subdivision (1) and adding Subdivision (9) to read as follows: (2) In SECTION 1, following amended Section 1(1), Article 21.07-6, Insurance Code (house committee printing, page 5, between lines 8 and 9), insert a new Subdivision (9) to read as follows: (9) "Pharmacy benefit manager" means a person who acts as an administrator in connection with pharmacy benefits. (3) Following SECTION 1, insert a new SECTION to be numbered appropriately to read as follows: SECTION ____. Subsection (a), Section 3, Article 21.07-6, Insurance Code, is amended to read as follows: (a) An individual, corporation, organization, trust, partnership, or other legal entity may not act as or hold itself out as an administrator, including a pharmacy benefit manager, unless it is covered by and is doing business under a certificate of authority issued under this article. (4) Following SECTION 2, insert a new SECTION to be numbered appropriately to read as follows: SECTION ____. Article 21.07-6, Insurance Code, is amended by adding Section 19B to read as follows: Sec. 19B. DISCLOSURE OF CERTAIN PATIENT INFORMATION PROHIBITED. (a) A pharmacy benefit manager may not disclose to an employer contracting with the manager under an employer plan information in the possession of the manager or to which the manager has access that was compiled during the course of treatment of a patient who is an employee or dependent of an employee and that could reasonably be used to determine the identity of the patient, including: (1) a medical record; (2) genetic test information; (3) a clinical research record; or (4) a prescription record. (b) A pharmacy benefit manager may not sell or share for purposes of establishing a financial interest a list of patients that contains information through which the identity of individual patients is disclosed. (c) All patient, physician, and health care provider data maintained by the pharmacy benefit manager shall be maintained in a confidential manner that prevents unauthorized disclosure to third parties. (d) This section does not prohibit: (1) general advertising about a specific pharmaceutical product or service; (2) a person from requesting and receiving information regarding a specific pharmaceutical product or service; or (3) a person from requesting and receiving information regarding the person's own records or claims, or information regarding the person's dependent's records or claims. (5) Renumber SECTIONS of the bill appropriately.