1. Short title This Act may be cited as the Promoting Better Patient Data Security Act of 2019 . 2. Recognition of security practices Part 1 of subtitle D of the Health Information Technology for Economic and Clinical Health Act ( 42 U.S.C. 17931 et seq.) is amended by adding at the end the following: 13412. Recognition of security practices (a) In general Consistent with the authority of the Secretary under sections 1176 and 1177 of the Social Security Act, when making determinations relating to fines under section 13410, decreasing the length and extent of an audit under section 13411, or remedies otherwise agreed to by the Secretary, the Secretary shall consider whether the covered entity or business associate has adequately demonstrated that it had, for not less than the previous 12 months, recognized security practices in place that may— (1) mitigate fines under section 13410; (2) result in the early, favorable termination of an audit under section 13411