Processes de-identified data, in Arizona

Genetic Information Privacy Act, section 44-8001(3) and (6)(c) · Read the law's page

• To keep data outside the definition of genetic data, de-identify it in accordance with 45 CFR section 164.514(b); data de-identified in that way is de-identified data under the chapter, and genetic data does not include de-identified data (section 44-8001(3) and (6)(c)).

Health information organizations, section 36-3804(F) · Read the law's page

• If you receive de-identified information from a health information organization, do not use it, alone or in combination with other information, to identify an individual (section 36-3804(F)).

Health information organizations, section 36-3805(C) · Read the law's page

• If you are a health information organization, do not transfer individually identifiable health information or de-identified health information that is accessible through the health information exchange to any person or entity for the purpose of research, or for use as part of a set of data for an application for grant or other research funding, unless the health care provider obtains the individual's consent for the transfer (section 36-3805(C)).
• Have a health care provider participating in the organization document that it has provided a notice of transfer, in the form of the individual's signature showing the individual has received and read and understands the notice and consents to the transfer; the notice must be in at least twelve-point type and describe the purposes of the transfer (section 36-3805(C)).