Utah Code 26B-8-406. Disclosure of health data — Limitations
Current as of: 2024 | Check for updates
|
Other versions
The department may not make a disclosure of any identifiable health data unless:
(1) one of the following persons has consented to the disclosure:
Terms Used In Utah Code 26B-8-406
- Health data: means any information, except vital records as defined in Section 26B-8-101, relating to the health status of individuals, the availability of health resources and services, and the use and cost of these resources and services. See Utah Code 26B-8-401
- Identifiable health data: means any item, collection, or grouping of health data which makes the individual supplying it or described in it identifiable. See Utah Code 26B-8-401
- Individual: means a natural person. See Utah Code 26B-8-401
- Organization: means any corporation, association, partnership, agency, department, unit, or other legally constituted institution or entity, or part of any of these. See Utah Code 26B-8-401
- Person: means :(24)(a) an individual;(24)(b) an association;(24)(c) an institution;(24)(d) a corporation;(24)(e) a company;(24)(f) a trust;(24)(g) a limited liability company;(24)(h) a partnership;(24)(i) a political subdivision;(24)(j) a government office, department, division, bureau, or other body of government; and(24)(k) any other organization or entity. See Utah Code 68-3-12.5
- Power of attorney: A written instrument which authorizes one person to act as another's agent or attorney. The power of attorney may be for a definite, specific act, or it may be general in nature. The terms of the written power of attorney may specify when it will expire. If not, the power of attorney usually expires when the person granting it dies. Source: OCC
- Research and statistical purposes: means the performance of activities relating to health data, including:
(6)(a) describing the group characteristics of individuals or organizations;(6)(b) analyzing the interrelationships among the various characteristics of individuals or organizations;(6)(c) the conduct of statistical procedures or studies to improve the quality of health data;(6)(d) the design of sample surveys and the selection of samples of individuals or organizations;(6)(e) the preparation and publication of reports describing these matters; and(6)(f) other related functions. See Utah Code 26B-8-401- State: when applied to the different parts of the United States, includes a state, district, or territory of the United States. See Utah Code 68-3-12.5
- United States: includes each state, district, and territory of the United States of America. See Utah Code 68-3-12.5
(1)(a) the individual;(1)(b) the next-of-kin if the individual is deceased;(1)(c) the parent or legal guardian if the individual is a minor or mentally incompetent; or(1)(d) a person holding a power of attorney covering such matters on behalf of the individual;(2) the disclosure is to a governmental entity in this or another state or the federal government, provided that:(2)(a) the data will be used for a purpose for which they were collected by the department; and(2)(b) the recipient enters into a written agreement satisfactory to the department agreeing to protect such data in accordance with the requirements of this part and department rule and not permit further disclosure without prior approval of the department;(3) the disclosure is to an individual or organization, for a specified period, solely for bona fide research and statistical purposes, determined in accordance with department rules, and the department determines that the data are required for the research and statistical purposes proposed and the requesting individual or organization enters into a written agreement satisfactory to the department to protect the data in accordance with this part and department rule and not permit further disclosure without prior approval of the department;(4) the disclosure is to a governmental entity for the purpose of conducting an audit, evaluation, or investigation of the department and such governmental entity agrees not to use those data for making any determination affecting the rights, benefits, or entitlements of any individual to whom the health data relates;(5) the disclosure is of specific medical or epidemiological information to authorized personnel within the department, local health departments, public health authorities, official health agencies in other states, the United States Public Health Service, the Centers for Disease Control and Prevention (CDC), or agencies responsible to enforce quarantine, when necessary to continue patient services or to undertake public health efforts to control communicable, infectious, acute, chronic, or any other disease or health hazard that the department considers to be dangerous or important or that may affect the public health;(6)(6)(a) the disclosure is of specific medical or epidemiological information to a “health care provider” as defined in Section78B-3-403 , health care personnel, or public health personnel who has a legitimate need to have access to the information in order to assist the patient or to protect the health of others closely associated with the patient; and(6)(b) this Subsection (6) does not create a duty to warn third parties;(7) the disclosure is necessary to obtain payment from an insurer or other third-party payor in order for the department to obtain payment or to coordinate benefits for a patient;(8) the disclosure is to the subject of the identifiable health data; or(9) the disclosure is limited to the results of a blood or urine test and the disclosure is:(9)(a) to the Driver License Division, as authorized by Section53-3-111 ; or(9)(b) to the requesting law enforcement agency as part of an investigation, as authorized by Subsection26B-1-216 (4).