- (a) The Health Care Authority shall ensure that patient specific protected health information be disclosed only in accordance with the patient's authorization or best interest to those having a need to know, in compliance with state confidentiality laws and the Health Insurance Portability and Accountability Act of 1996 and any amendments and regulations under the act.
- (b) The health information, data and records of the network shall be exempt from disclosure under the provisions of chapter twenty-nine-b of this code.