- (1) Health data received by the Department of Health and Human Services is confidential and protected according to applicable federal and state statue, regulation, rule, or agreement.
- (2) The Department of Health and Human Services shall not store or use any information it receives from an EDI that the Department is not authorized to collect by statute, rule, or agreement with a data supplier.
- (3) An EDI that receives and forwards health data or other information to the Department of Health and Human Services on behalf of a data supplier without inspecting the contents of the information does not violate patient confidentiality or individual privacy rights.
KEY: health, electronic data interchange
Date of Last Change: November 9, 2025
Notice of Continuation: May 29, 2024
Authorizing, and Implemented or Interpreted Law: 26B-1-202(2)(z); 26B-1-202(2)(bb); 26B-1-202(2)(cc); 26B-1-202(2)(dd); 26B-1-202(2)(kk); 26B-1-202(2)(pp); 26B-8-404; 26B-8-405