A bill to amend the Social Security Act to provide for the protection of the privacy of personal medical information maintained by certain medical care institutions.

Amends title XI of the Social Security Act to direct the Secretary of Health and Human Services to require each medical care institution participating in the Medicaid or Medicare program to implement procedures which meet specific privacy protection requirements for the maintenance and disclosure of personal medical information.

Requires medical care institutions to afford an individual (or his or her designated representative) a reasonable opportunity to inspect his or her personal medical information file. Permits the parent or guardian of a minor child to inspect the file of such minor, except that portion of the file which relates to: (1) venereal diseases of the minor; (2) family planning services (including abortions) sought and received by such minor; (3) alcohol or drug abuse services; and (4) mental health services. Requires that the individual seeking disclosure of his personal medical information file, sign and date a written authorization which permits a medical care institution to disclose specific information to specified persons for a specified period of time, and requires that such institution maintain a record of all such disclosures.

Makes it the duty of medical care institutions to maintain accurate, relevant, timely, and complete files and to grant to individuals the right to request changes in their files. Requires such institutions either to make the requested changes and notify the individual of the change or to supply the individual with the reasons why such changes were not made and with an opportunity to file a statement disagreeing with the institution's refusal. Prohibits an institution from refusing to make a requested change if such change would make an individual's file accurate, relevant, timely, or complete.

Requires medical care institutions to disclose to individuals with personal medical information on file the uses to which such files may be put without their prior authorization. Limits disclosure to those portions of such files which are necessary to accomplish the purposes for which disclosure was originally authorized.

Permits disclosure of personal medical information files without prior authorization: (1) for consultation; (2) for compelling circumstances involving an individual's health and safety; (3) for audits, evaluations, and biomedical and epidemiological research; (4) to comply with public reporting statutes; (5) to supply admission and health status information; and (6) to comply with a lawful judicial or administrative subpoena.