Amend CSHB 300 (house committee printing) as follows:

(1) On page 1, line 12, strike "to another person" and substitute "outside the entity holding the information".

(2) On page 1, line 17, strike "April 1, 2011" and substitute "September 1, 2011".

(3) On page 2, line 14, strike "April 1, 2011" and substitute "September 1, 2011".

(4) On page 6, line 16, strike "serious" and substitute "egregious".

(5) On page 9, strike lines 13-17 and substitute the following:

(b) If the commission has evidence that a covered entity has committed violations of this chapter that are egregious and constitute a pattern or practice, the commission may:

(1) require the covered entity to submit to the commission the results of a risk analysis conducted by the covered entity as described by 45 C.F.R. Section 164.308(a)(1)(ii)(A); or

(2) if the covered entity is licensed by a licensing agency of this state, request that the licensing agency conduct an audit of the covered entity's system to determine compliance with the provisions of this chapter.