The department may disclose otherwise nondisclosable child protection information to a person or organization doing research or maintaining health statistics, if the anonymity of the client is assured, and the department recognizes the project as a bona fide research or statistical undertaking. If a research or statistical project concerns the disclosure of protected health information, the department may disclose under this section the protected health information only if the information is

1. (1) not individually identifiable as provided under 45 C.F.R. 164.502(d), revised as of October 1, 2004, and adopted by reference;
2. (2) for a valid health care operations purpose; for purposes of this section, "health care operations" has the meaning given in 45 C.F.R. 164.501, revised as of October 1, 2004, and adopted by reference;
3. (3) disclosed to a business associate, to a public health authority, or to a health oversight agency; and
4. (4) disclosed in compliance with 45 C.F.R. 164.512(i), revised as of October 1, 2004, and adopted by reference, or is part of a limited data set as identified under 45 C.F.R. 164.514(e), revised as of October 1, 2004, and adopted by reference.

(Eff. 5/15/83, Register 86; am 10/14/2005, Register 176)

Authority: AS 47.06.010, AS 47.06.080, AS 47.17.040, AS 47.06.040, AS 47.10.093, AS 47.06.070, AS 47.14.010