(a) Notwithstanding any other law, any county may establish a computerized database system within that county to allow provider agencies, as defined in subdivision (h), to share identifying information, as specified in subdivision (c), regarding families at risk for child abuse or neglect for all of the following purposes:

1. (1) Forming a multidisciplinary personnel team, as defined in either subdivision (d) of Section 18951 or paragraph (1) of subdivision (b) of Section 18961.7.
2. (2) The prevention, identification, management, or treatment of child abuse or neglect.
3. (3) The provision of child welfare services to a child or child’s family.

(c) When a child or family has been identified as at risk for child abuse or neglect under this section, only the following information shall be entered into the system:

1. (1) The name, address, telephone number, and date and place of birth of family members and persons living in the child’s home.
2. (2) The number assigned to the case by each provider agency.
3. (3) The name and telephone number of each employee assigned to the case, or a contact person, from each provider agency.
4. (4) The date or dates of contact between each provider agency and a family member or a person living in the child’s home.

(h) For the purposes of this section, “provider agency” means any governmental or other agency that has as one of its purposes the prevention, identification, management, or treatment of child abuse or neglect. The provider agencies serving children and their families that may share information under this section shall include, but not be limited to, the following entities or service agencies:

1. (1) Social services.
2. (2) Children’s services.
3. (3) Health services.
4. (4) Mental health services.
5. (5) Probation.
6. (6) Law enforcement.
7. (7) Schools.

(j)

1. (1) Notwithstanding subdivision (a), the Counties of Santa Clara, Santa Cruz, and San Mateo may jointly establish a computerized database system to be used between and among those counties pursuant to this section.

2. (2)

   1. (A) A computerized database system established pursuant to this subdivision may, in addition to the purposes specified in subdivision (a), share identifying information, as specified in subdivision (c), regarding families at risk for child abuse or neglect for research purposes, the intent of which is to identify ways to better serve these families and to prevent abuse and neglect. The counties may enter into a memorandum of understanding with a research entity for the research purposes. The memorandum of understanding shall include an information sharing agreement. Personal identifying information may only be shared upon approval by an institutional review board. The approval required under this paragraph shall include a review and determination that all of the following criteria have been satisfied:

      1. (i) The researcher has provided a plan sufficient to protect personal identifying information from improper use and disclosures, including sufficient administrative, physical, and technical safeguards to protect personal identifying information from reasonably anticipated threats to the security or confidentiality of the information.
      2. (ii) The researcher has provided a sufficient plan to destroy or return all personal identifying information as soon as it is no longer needed for the research project, unless the researcher has demonstrated an ongoing need for the personal identifying information for the research project and has provided a long-term plan sufficient to protect the confidentiality of that information.
      3. (iii) The researcher has provided sufficient written assurances that the personal identifying information will not be reused or disclosed to any other person or entity, or used in any manner, not approved in the research protocol, except as required by law or for authorized oversight of the research project.

   2. (B) The institutional review board shall, at a minimum, accomplish all of the following as part of its review and approval of the research project for the purpose of protecting personal identifying information held in the databases established under this section:

      1. (i) Determine whether the requested personal identifying information is needed to conduct the research.
      2. (ii) Permit access to personal identifying information only if it is needed for the research project.
      3. (iii) Permit access only to the minimum necessary personal identifying information needed for the research project.
      4. (iv) Require the assignment of unique subject codes that are not derived from personal identifying information in lieu of social security numbers if the research can still be conducted without social security numbers.
      5. (v) If feasible, and if cost, time, and technical expertise permit, require the county to conduct a portion of the data processing for the researcher to minimize the release of personal identifying information.
   3. (C) Reasonable costs to the county associated with the county’s process of protecting personal identifying information under the conditions of institutional review board approval may be billed to the researcher, including, but not limited to, an agency’s costs for conducting a portion of the data processing for the researcher, removing personal identifying information, encrypting or otherwise securing personal identifying information, or assigning subject codes.
3. (3) The counties jointly establishing and using a computerized database system pursuant to this subdivision shall install, and be jointly responsible for, agreed-upon system controls to monitor system use and information security to detect any violations that may cause intentional or unintentional disclosure of information to unauthorized users of the system.
4. (4) For the purposes of a computerized database system established pursuant to this subdivision, “provider agency” includes local educational agencies in addition to the entities or agencies listed in subdivision (h).
5. (5) If the ability to share identifying information, as described in this subdivision, becomes available within the statewide child welfare information system, the counties shall decommission the computerized database system established pursuant to this subdivision.