Illinois Statutes Chapter 740. Civil Liabilities § 110/9.11. Establishment and disclosure of limited data sets and de-identified information

(a) An HIE, person, therapist, facility, agency, interdisciplinary team, integrated health system, business associate, covered entity, or entity facilitating the establishment or operation of an HIE may, without a recipient's consent, use information from a recipient's record to establish, or disclose such information to a business associate to establish, and further disclose information from a recipient's record as part of a limited data set as defined by and in accordance with the requirements set forth under HIPAA, as specified in 45 CFR 164.514(e). An HIE, person, therapist, facility, agency, interdisciplinary team, integrated health system, business associate, covered entity, or entity facilitating the establishment or operation of an HIE may, without a recipient's consent, use information from a recipient's record or disclose information from a recipient's record to a business associate to de-identity the information in accordance with HIPAA, as specified in 45 CFR 164.514.

(b) As used in this Section: