Illinois Statutes Chapter 410. Public Health § 520/5. Disclosure of health data

(1) The individual described in the data has consented to the disclosure.

(2) The disclosure is to a governmental entity in this State, in another state or to the federal government, provided that:

(3) The disclosure is to an individual or organization, for a specified time period determined by the Department, solely for bona fide research and statistical purposes, as determined in accordance with guidelines adopted by the Department, and the Department determines that: (i) the disclosures of the data to the requesting individual or organization is required for the research and statistical purposes proposed; and (ii) the requesting individual or organization has entered into a written agreement satisfactory to the Department that it will protect such data in accordance with the requirements of this Act and will not permit further disclosure without prior approval of the Department. In no event, however, may the name, address or other unique personal identifier of an individual supplying the data or described in it be disclosed under this subparagraph to the requesting individual or organization, unless a Department-approved Institutional Review Board or its equivalent on the protection of human subjects in research has reviewed and approved the data request.

(4) The disclosure is to a governmental entity for the purpose of conducting an audit, evaluation or investigation of the Department and such governmental entity agrees not to use such data for making any determination to whom the health data relates.