§325-123 Confidentiality and content of registry records. (a) All immunization records and reports made for the purposes of this part that directly or indirectly identify a person shall be kept confidential and shall not be disclosed by any person unless:
(1) The person identified, the person's legal guardian, or in the case of a minor, the minor's parent or legal guardian consents;
(2) Disclosure is deemed necessary by the director of health to carry out this chapter;
(3) A court directs upon its determination that disclosure is necessary for the conduct of proceedings before it;
(4) The disclosure is made between the person's health care provider and payor to obtain reimbursement for services rendered to the person; provided that disclosure shall be made only if the provider informs the person that a reimbursement claim will be made to the person's payor, the person is afforded an opportunity to pay the reimbursement directly, and the person does not pay; or
(5) The department of health releases aggregate immunization information that does not disclose any identifying information of persons whose information is maintained in the registry.
(b) Registry information shall be limited to patient name, demographic information, and contact information; information specific to immunizations or medications received by the patient, including types, manufacturers, lot numbers, expiration dates, anatomical sites of administration, routes of administration, vaccine information statement publication dates, doses, dates administered, the patient's history of vaccine-preventable diseases, and contraindications, precautions, adverse reactions to, or comments regarding immunizations or medications; and the name and contact information of the vaccination administrator or medication provider and the patient's health care provider.
(c) The department of health shall adopt administrative, physical, and technical measures to ensure the security of the registry; protect the confidentiality, integrity, and availability of registry data; and prevent unauthorized access to registry information. [L 2010, c 113, pt of §1; am L 2012, c 275, §2]
Structure Hawaii Revised Statutes
325. Infectious and Communicable Diseases
325-1 Diseases or conditions declared communicable or dangerous to public health.
325-2 Physicians, laboratory directors, and health care professionals to report.
325-2.5 Health care-associated infection reporting.
325-4 Identity of patients safeguarded.
325-5 Antitoxins, antiserums, vaccines, biologics, and drugs.
325-8 Infected persons and quarantine.
325-12 Common drinking cup prohibited.
325-16 Informed consent for testing or disclosure.
325-17 Quality assurance standards for HIV antibody testing.
325-18 Advisory committees for health care workers infected with blood-borne infections.
325-19 Rubella testing of pregnant women.
325-20 Agreements; collaborative assistance in control of disease outbreaks.
325-21 Sale of sterile syringes for the prevention of disease.
325-32 Immunization against infectious diseases.
325-33 Performance of vaccination and immunization.
325-36 Duty of adult, or of parent, guardian, or caregiver.
325-37 Fraud; wilful misrepresentation; failure to comply; penalties.
325-38 Immunization of indigent, medically indigent, and other persons.
325-51 Blood samples of pregnant women required.
325-52 Serologic tests; reports.
325-53 Reports of blood tests.
325-54 Reports confidential; penalty.
325-71 Reports by physicians and others.
325-73 Protection of record; penalty.
325-74 Physicians; precautions; instructions.
325-75 Reporting recovery of patient.
325-76 Examinations for tuberculosis.
325-78 Test and treatment for tuberculosis.
325-91 Blood transfusion; hepatitis.
325-92 Prenatal hepatitis B screening and treatment of newborns.
325-101 Confidentiality of records and information.
325-104 Responsibility to report.
325-112 Sterile needle and syringe exchange program established.
325-113 Operation of the program.
325-115 Program oversight committee.
325-117 Termination of the program.
325-122 Hawaii immunization registry; establishment and purposes.
325-123 Confidentiality and content of registry records.
325-124 Purposes for access to registry information; access not a disclosure.
325-125 Registry record requirements; duration of retention.