The department may conduct studies and publish information based upon the discharge data obtained pursuant to this article, provided the studies and published information do not include information in a form which could be used to identify any patient or violate HIPAA.