(a)

1. (1) The State Insurance Department, in consultation with the Arkansas Healthcare Transparency Initiative Board, will determine a limited data set of elements to be made available for research projects.
2. (2) The requester will submit to the Scientific Advisory Subcommittee of the Arkansas Healthcare Initiative Board through the administrator a detailed research scope and purpose to determine if a limited data set can be made available.
3. (3) The Insurance Commissioner will approve or deny each request for a limited data set, upon recommendation by the subcommittee and the initiative board.
4. (4) The requester will sign a data use agreement with the commissioner if data is supplied to the requester.

(b) The requester shall protect patient privacy and confidentiality information contained in the limited data set according to:

1. (1) HIPAA;
2. (2) Applicable laws of Arkansas; and
3. (3) The data use agreement.