Connecticut General Statutes 19a-25f – Disclosure of personally identifiable information by state agencies to the Connecticut Health Information Network
Notwithstanding any provision of this chapter or chapter 14, 319, 319b, 319o, 319t, 319v or 368z, or any regulation adopted pursuant to said chapters, the state agencies that participate in the Connecticut Health Information Network, subject to federal restrictions on disclosure or redisclosure of information, may disclose personally identifiable information held in agency databases to the administrator of the Connecticut Health Information Network and its subcontractors for the purposes of (1) network development and verification, and (2) data integration and aggregation to enable response to network queries. No state agency that participates in the Connecticut Health Information Network shall disclose personally identifiable information to the Connecticut Health Information Network if such disclosure would constitute a violation of federal law, including, but not limited to, the Health Insurance Portability and Accountability Act of 1996 (P.L. 104-191) (HIPAA), as amended from time to time, and the Family Educational Rights and Privacy Act of 1974, 20 USC 1232g, (FERPA), as amended from time to time, and any regulations promulgated thereunder at 34 C.F.R. part 99. The administrator of the Connecticut Health Information Network and its subcontractors shall not disclose personally identifiable information.