2.3 State Mandatory Cancer Reporting Laws & Statutory Authority

2.3 State Mandatory Cancer Reporting Laws & Statutory Authority

Cancer surveillance in the United States does not operate as an optional, voluntary, or academic endeavor. It is a compulsory legal duty grounded in constitutional jurisprudence, federal legislation, and state statutory mandates. While hospital cancer programs frequently seek accreditation from professional bodies such as the American College of Surgeons Commission on Cancer (CoC), the fundamental legal obligation to identify, abstract, and report neoplastic disease originates entirely from State Mandatory Cancer Reporting Laws. Understanding this legal framework ensures that Oncology Data Specialists recognize their statutory authority, adhere to reporting timelines, and leverage statutory immunity protections.

---

Constitutional Basis: Sovereign Police Powers

Under the Tenth Amendment to the United States Constitution, powers not delegated to the federal government nor prohibited to the states are reserved to the states respectively, or to the people. Historically and legally, the protection of the public's health, safety, and general welfare falls under the sovereign police powers of individual state governments.

Pursuant to these police powers, state legislatures possess broad constitutional authority to enact public health statutes. Disease surveillance—the ongoing, systematic collection, analysis, and interpretation of health-related data essential to the planning, implementation, and evaluation of public health practice—represents a quintessential exercise of state police power. Consequently, states possess the sovereign authority to mandate that healthcare providers report newly diagnosed cases of communicable diseases (e.g., tuberculosis, syphilis) and non-communicable chronic diseases of significant public burden, most notably malignant neoplasms.

---

Federal Statutory Authority: The Cancer Registries Amendment Act of 1992

Prior to the 1990s, cancer registration across the United States was highly uneven. While the National Cancer Institute (NCI) established the Surveillance, Epidemiology, and End Results (SEER) program in 1973 pursuant to the National Cancer Act of 1971, SEER was designed primarily to cover a representative sample of the U.S. population (initially roughly 10%, later expanding to ~48%) rather than providing total nationwide coverage. Many states lacked the legislative framework, funding, or infrastructure to operate statewide, population-based cancer registries.

To bridge this surveillance gap, the United States Congress enacted the Cancer Registries Amendment Act of 1992 (Public Law 102-515), codified at Title 42 of the United States Code (U.S.C.), Section 280e et seq.

Core Accomplishments of Public Law 102-515

1. Establishment of the NPCR: Designated the Centers for Disease Control and Prevention (CDC) to administer the National Program of Cancer Registries (NPCR).
2. Federal Financial & Technical Assistance: Authorized federal grant funding to assist states and territories in establishing, operating, and enhancing statewide population-based cancer registries.
3. Model Legislation & Statutory Mandates: To qualify for federal funding under NPCR, Congress required states to enact comprehensive state cancer reporting legislation meeting specific federal benchmarks, including:
   • Mandatory reporting of cancer cases by healthcare providers, facilities, and laboratories;
   • Legal authority for central registry personnel to access medical records and casefinding sources for completeness verification;
   • Confidentiality protections prohibiting public disclosure of individual patient identities; and
   • Explicit statutory immunity shielding reporting entities and personnel from legal liability.

Today, the combination of CDC NPCR (supporting 46 states, the District of Columbia, Puerto Rico, the Pacific Island Jurisdictions, and the U.S. Virgin Islands) and NCI SEER ensures that 100% of the United States population is covered by central cancer registry surveillance.

Other Federal, Territorial and Provincial Requirements

• Public Law 107-260 (Benign Brain Tumor Cancer Registries Amendment Act, 2002) amended the NPCR statute so that non-malignant (benign and borderline) primary brain and central nervous system tumors are collected for cases diagnosed on or after January 1, 2004. CoC adopted the same requirement for accredited programs.
• Territories such as Puerto Rico, Guam and the U.S. Virgin Islands operate central registries under their own laws with NPCR support.
• Canadian provinces and territories operate population-based registries under provincial or territorial legislation and report to the Canadian Cancer Registry, maintained by Statistics Canada. NAACCR standards apply across both countries.
• Facility and program requirements add to, but never replace, the law: a CoC-accredited hospital must still report to its state registry, and a state may require items or tumors (for example, LCIS or intraepithelial neoplasia grade III of the vulva, vagina or anus) that CoC does not require.

---

State Reporting Statutes & Administrative Codes

Today, all 50 states, the District of Columbia, and U.S. territories have enacted mandatory cancer reporting laws. In state statutory architecture, cancer reporting is structured in two distinct tiers:

1. Enabling Statutes: Passed by the state legislature and signed by the governor (e.g., State Health and Safety Code). These statutes declare cancer to be a reportable disease, establish the central cancer registry under the state Department of Health, define broad reporter categories, establish statutory immunity, and prescribe penalties for failure to report.
2. Administrative Codes (Regulations): Promulgated by the state health agency pursuant to statutory authority. Administrative codes detail operational requirements, including the precise list of reportable neoplasms, specific demographic and clinical data items (incorporating national NAACCR standards), reporting mechanisms (e.g., secure electronic transmission, XML schemas), and strict reporting deadlines.

---

Mandated Reporters: Who Must Report?

A frequent misconception among clinicians and non-registry administrators is that cancer reporting is required only of large acute-care hospitals or facilities accredited by the Commission on Cancer. Under state statutes, the legal mandate to report applies broadly across the entire healthcare spectrum:

---

Reporting Timeframes & Benchmarks

Timely reporting is vital to epidemiological surveillance, outbreak investigations, and resource allocation. State administrative codes enforce strict reporting schedules:

Facility Reporting Deadlines Are Set by Each State

The deadline for a facility to report a case to the central registry is set by each state's statute or administrative rule. Many states use about six months (often 180 days) from diagnosis or first contact, and some set shorter deadlines or require monthly batches. Neither NAACCR nor the CoC sets a facility-to-state reporting deadline. The CoC's own timeliness requirement is separate: accredited programs submit all new and updated cases to the Rapid Cancer Reporting System at least once each calendar month (Standard 6.4).

┌───────────────────────┐   By state deadline        ┌────────────────────────┐
│ Healthcare Facility / │ ─────────────────────────> │  State Central Cancer  │
│ Pathology Laboratory  │   Abstract Transmission    │        Registry        │
└───────────────────────┘                            └────────────────────────┘
                                                                  │
                                                                  │ Annual Submission:
                                                                  │ 12-month evaluation data
                                                                  │ 23/24-month complete file
                                                                  ▼
                                                     ┌────────────────────────┐
                                                     │  National Surveillance │
                                                     │   (CDC NPCR / SEER)    │
                                                     └────────────────────────┘

Electronic Pathology (e-Path) Timelines

Pathology laboratories that send electronic pathology reports (e-Path) directly to central registries usually report on a much shorter cycle than hospitals abstracting full cases, often in near real time. The exact interval is set by state rule.

Central Registry Submission to National Surveillance

To achieve NAACCR Certification and meet federal reporting standards under CDC NPCR and NCI SEER, state central registries must compile, deduplicate, consolidate, and transmit statewide annual cancer files to federal repositories on an established cycle:

• 12-month data: NPCR evaluates data submitted about 12 months after the close of the diagnosis year against its Advanced National Data Quality Standard (at least 90% complete).
• 23/24-month data: the complete file is due about 23 months after the close of the diagnosis year. NPCR's National Data Quality Standard requires at least 95% completeness, and NAACCR certification requires data received within 23 months (for example, 2024 diagnoses submitted by late 2026).

---

Statutory Immunity from Civil and Criminal Liability

A critical concern for physicians, healthcare executives, and cancer registrars is the risk of litigation: Can a patient sue a hospital or an Oncology Data Specialist for invasion of privacy, breach of physician-patient privilege, or unauthorized disclosure of sensitive cancer diagnoses?

To eliminate any hesitation or resistance to public health reporting, state legislatures incorporated robust Statutory Immunity Provisions into every state cancer reporting statute.

Principles of Statutory Immunity

1. Protection Against Common Law Torts: State statutes grant broad immunity from civil liability, criminal prosecution, and professional administrative discipline to any healthcare facility, laboratory, physician, registrar, or employee who furnishes cancer data to the state central registry pursuant to law.
2. Evidentiary Privilege Bar: The act of reporting cancer data cannot be construed as a violation of the physician-patient relationship, doctor-patient privilege, or healthcare confidentiality laws.
3. Good-Faith Standard: As long as the entity or individual reports cancer data in good faith—believing the condition is reportable under state law and administrative regulations—they are entirely shielded from legal liability, even if a case is subsequently determined to be non-reportable upon central registry review.

Reciprocal Duty of Confidentiality

Statutory immunity is balanced by strict legal duties imposed on central registries. State statutes declare that all cancer data collected by the state central registry are strictly confidential, privileged, and exempt from public disclosure under state Freedom of Information Acts (FOIA) or public records requests. Central registry staff who willfully or unlawfully disclose identifiable patient information face severe statutory penalties, including substantial monetary fines, termination of employment, and misdemeanor or felony criminal prosecution.

---

Realistic Scenarios & Exam Pitfalls

Scenario 1: The Outpatient Dermatologist's Challenge

A private dermatologist excises an invasive nodular melanoma in their outpatient clinic and sends the tissue to an independent commercial pathology laboratory. The dermatologist does not maintain hospital admitting privileges and is not affiliated with a CoC-accredited program. When contacted by the state cancer registry field abstractor for clinical staging information, the dermatologist refuses to cooperate, stating: "I run a private practice, not a hospital. State cancer registry laws apply only to accredited hospital facilities."

Legal Resolution: The dermatologist is legally incorrect. State mandatory reporting statutes designate all licensed physicians and pathology laboratories as mandated reporters. Outpatient cancer diagnoses are fully reportable under state law. Failing to report or refusing registry access to medical records subjects the physician to state public health administrative citations, civil monetary fines, and referral to the state medical licensing board.

Scenario 2: Hospital Counsel Fearing Defamation Lawsuits

A patient with suspected metastatic lung carcinoma is diagnosed clinically based on imaging and sputum cytology; formal biopsy is deferred due to severe comorbidities. The hospital risk management attorney directs the cancer registrar not to report the case to the state central registry because the diagnosis lacks histopathologic tissue confirmation, fearing a patient defamation or privacy lawsuit if the clinical diagnosis proves inaccurate.

Legal Resolution: The attorney's advice violates state reporting mandates. State registry rules define specific reportability criteria based on diagnostic confirmation, including clinical diagnosis by a physician. Furthermore, state statutory immunity explicitly protects the hospital and the registrar from civil liability for good-faith reporting based on clinical medical documentation.