Skip to Content

Disclosure of individually identifiable health information, A.R.S. § 36-3805

Link to the law
This will open in a new window

“Disclosure of individually identifiable health information”
 
Health information organizations (HIOs) may disclose individually identifiable information if the individual has not opted out of HIO participation, the disclosure complies with the HIPAA Privacy Rules, and the disclosure is described in the HIO’s notice of health information practices. HIOs may not sell individually identifiable information or use such information for commercial purposes without an individual’s consent. Health care providers must obtain an individual’s consent before an HIO may transfer individually identifiable information or deidentified health information for research purposes.