Ch. 1, § 7. Use of Data

(a) Participants and authorized users may only use the Health Information Exchange and data for the following purposes: (i) For treatment, payment, and healthcare operations, as defined by HIPAA; (ii) For any other use that is permitted or required under HIPAA, the WYFI Policy and Procedure Manual, or other applicable law governing the use and disclosure of data; or, (iii) To facilitate the implementation of meaningful use criteria as required under the American Recovery and Reinvestment Act of 2009, the 21st Century Cures Act, and their related federal regulations, as permitted by HIPAA (b) A participant shall not modify information submitted to the Health Information Exchange by another participant. (c) The Department may use de-identified data for the purpose of analysis to inform policy and program funding needs, public health activities, and to conduct population health reporting. (d) The Department may use data for treatment, payment, healthcare operations, public health activities, or patient safety. (e) Use or disclosure of data not otherwise authorized by this Chapter requires a signed authorization from the patient or court order.