Please consider making a donation to keep this project's resources available at no cost to the public. Your donation will support new research, updates to current resources, and website maintenance for HealthInfoLaw.org.
Disclosure of individually identifiable health information, A.R.S. § 36-3805
Link to the law
This will open in a new window
This will open in a new window
“Disclosure of individually identifiable health information”
Health information organizations (HIOs) may disclose individually identifiable information if the individual has not opted out of HIO participation, the disclosure complies with the HIPAA Privacy Rules, and the disclosure is described in the HIO’s notice of health information practices. HIOs may not sell individually identifiable information or use such information for commercial purposes without an individual’s consent. Health care providers must obtain an individual’s consent before an HIO may transfer individually identifiable information or deidentified health information for research purposes.