Hawaii Revised Statutes Division 1. Government § 325-123

(a) All immunization records and reports made for the purposes of this part that directly or indirectly identify a person shall be kept confidential and shall not be disclosed by any person unless:

(b) Registry information shall be limited to patient name, demographic information, and contact information; information specific to immunizations or medications received by the patient, including types, manufacturers, lot numbers, expiration dates, anatomical sites of administration, routes of administration, vaccine information statement publication dates, doses, dates administered, the patient's history of vaccine-preventable diseases, and contraindications, precautions, adverse reactions to, or comments regarding immunizations or medications; and the name and contact information of the vaccination administrator or medication provider and the patient's health care provider.

(c) The department of health shall adopt administrative, physical, and technical measures to ensure the security of the registry; protect the confidentiality, integrity, and availability of registry data; and prevent unauthorized access to registry information.