§1173.5. Release of information

A. To ensure the privacy and protection of Louisianans' health information, the department shall not release confidential or protected health information collected from hospitals and other healthcare providers pursuant to this Subpart. The department shall adhere to and comply fully with appropriate privacy protection protocols that are at least as stringent as the HIPAA Privacy Rule.

B. Notwithstanding Subsection A of this Section, the department may release data collected pursuant to this Subpart for the purpose of conducting healthcare research which is a systematic investigation, including research development, testing, and evaluation, designed to develop or contribute to generalizable knowledge. All requests for data collected pursuant to this Subpart shall be submitted to the department and reviewed by the department's Institutional Review Board. The department shall deny any requests for data that it determines will be utilized for business or commercial purposes, including but not limited to market analysis and software development. The department shall have one representative of the provider group whose data is subject to the data release on the Institutional Review Board.

C. Each data request shall state the proposed use of the data requested and include an affirmation by the recipient that no attempt will be made to combine patient-level data provided for in the request with other data to identify patients and that no confidential information shall be released.

D. The department shall inform the Health Data Panel prior to the release of requested data collected pursuant to this Subpart.

Acts 2014, No. 790, §1; Redesignated from R.S. 40:1300.115 by HCR 84 of 2015 R.S.; Acts 2018, No. 206, §4.