HRS §323B-5
When de-identified health information can be shared
This section says the state strongly supports sharing health information that has been stripped of personal identifiers. This sharing is allowed for research, safety, running medical facilities, and health care operations. The information must be de-identified according to federal rules.
businessesfinancial institutionsstate agencies
The statute, as written — Disclosure, use, and production of de-identified protected health information
(a) Provided that individually identifiable protected health information has been de-identified pursuant to title 45 Code of Federal Regulations part 164, as may be amended, the State shall have a compelling interest in the public and private disclosure, use, and production of the de-identified protected health information for the purposes of medical or economic research, protecting patient or public safety, ensuring proper operation of facilities providing medical care, and health care operations as defined in title 45 Code of Federal Regulations part 164, as may be amended. (b) Public and private uses of de-identified protected health information in which the State shall have a compelling interest include but are not limited to: (1) De-identified protected health information from state agencies, hospitals, medical and health care facilities, health care providers, and providers of health insurance relating to: (A) Medical or economic research; and (B) Public safety; (2) De-identified protected health information from state agencies, pharmacies, hospitals, medical and health care facilities, health care providers, and providers of health insurance relating to patient protection and public safety involving unfair or deceptive acts or practices, restraints of trade, and price-fixing in violation of chapter 480; and (3) De-identified protected health information from state agencies, hospitals, medical and health care facilities, and health care providers relating to the proper operation of medical and health care facilities that includes: (A) Quality assessment and improvement activities; (B) Patient protection and safety activities; (C) Population based activities relating to improving health or reducing health care costs; (D) Fraud and abuse detection and compliance; and (E) Employment actions.
LawTrove is not legal advice. The summary above is a computer-generated restatement — the authoritative text is the official version linked above.