(740 ILCS 110/9.11)

Sec. 9.11. Establishment and disclosure of limited data sets and de-identified information.

(a) An HIE, person, therapist, facility, agency, interdisciplinary team, integrated health system, business associate, covered entity, or entity facilitating the establishment or operation of an HIE may, without a recipient's consent, use information from a recipient's record to establish, or disclose such information to a business associate to establish, and further disclose information from a recipient's record as part of a limited data set as defined by and in accordance with the requirements set forth under HIPAA, as specified in 45 CFR 164.514(e). An HIE, person, therapist, facility, agency, interdisciplinary team, integrated health system, business associate, covered entity, or entity facilitating the establishment or operation of an HIE may, without a recipient's consent, use information from a recipient's record or disclose information from a recipient's record to a business associate to de-identity the information in accordance with HIPAA, as specified in 45 CFR 164.514.

(b) As used in this Section:

(1) the terms "disclosure" and "use" shall have the meanings ascribed to them by HIPAA, as specified in 45 CFR 160.103; and

(2) "facility" means a developmental disability facility as defined in Section 1-107 of the Mental Health and Developmental Disabilities Code or a mental health facility as defined in Section 1-114 of the Mental Health and Developmental Disabilities Code.

(Source: P.A. 103-508, eff. 8-4-23.)