(b) For data reported during the pilot phase, hospital identifiers shall be encrypted by the department in any and all public databases and reports. The department shall provide each hospital with an encryption key for that hospital only to permit access to its own performance data for internal quality improvement purposes. Hospital specific public reporting of sepsis data including, but not limited to risk adjusted sepsis mortality rates, may require up to, but no more than, two years of "pilot phase" collection depending on the validity and reliability outcomes of the data collected.

(c) As described in the regulations pertaining to the submission of data on sepsis to the department, consultation with appropriate national, hospital and expert stakeholders will assist in determining the appropriate public release of hospital performance.

(d) The department shall issue regular reports as needed to hospitals assessing the accuracy of the data submitted during the pilot phase and provide guidance for improving the accuracy of data reporting.

(e) After the pilot phase is completed, all data submitted under this section and compiled in the database established herein and all public reports derived therefrom shall include hospital identifiers.

(f) Clinical performance data, including but not limited to individual hospital mortality rates adjusted for potential differences in risk factors and comparisons with state (or national, if available) averages, shall be developed and posted on the department's web site.