28 Pa. Code § 915.24 – Release of nonprotected data.

(a) Nonprotected data, as set forth in Appendix C, will be released upon request and approval by the Council except as provided for in subsection (b).
(b) The Council may prohibit the release of disaggregated data on sensitive medical conditions, procedures and diagnoses such as, but not limited to, substance abuse, mental diseases and disorders, acquired immunodeficiency syndrome and related conditions and pregnancy terminations, to ensure that the patient confidentiality safeguards contained in the act and this chapter are not violated.

This section cited in 28 Pa. Code § 915.2 (relating to principles governing data access).