UTAH CODE (Last Updated: January 16, 2015) |
Title 26. Utah Health Code |
Chapter 33a. Utah Health Data Authority Act |
§ 26-33a-109. Exceptions to prohibition on disclosure of identifiable health data. (Effective 5/13/2014)
Latest version.
-
(1) The committee may not disclose any identifiable health data unless: (a) the individual has authorized the disclosure; or (b) the disclosure complies with the provisions of: (i) this section; (ii) insurance enrollment and coordination of benefits under Subsection 26-33a-106.1(1)(d); or (iii) risk adjusting under Subsection 26-33a-106.1(1)(b). (2) The committee shall consider the following when responding to a request for disclosure of information that may include identifiable health data: (a) whether the request comes from a person after that person has received approval to do the specific research and statistical work from an institutional review board; and (b) whether the requesting entity complies with the provisions of Subsection (3). (4) A person accessing identifiable health data pursuant to Subsection (3) may not further disclose the identifiable health data: (a) without prior approval of the department; and (b) unless the identifiable health data is disclosed or identified by control number only.
Amended by Chapter 425, 2014 General Session