N.Y. Comp. Codes R. & Regs. tit. 10 § 66-1.2 - Statewide Immunization Registry

This law requires that health care providers report any administration of immunization to a child younger than 19 years to the New York Statewide Immunization Information System (if immunization is administered outside New York City) or the Citywide Immunization Registry (if immunization is administered in New York City) within 14 days of administration of the immunization (subject to some exceptions).  The regulation specifies that those who only administer the immunization are not responsible for reporting, unless the individual administering was designated to report by the individual ordering the immunization.  The regulation further discusses reporting requirements for certified home health agencies and in the case of non-patient specific immunization orders.
 
The regulation gives a list of information to be included in the report, which includes amongst other biographical details, the race, gender and ethnicity of the child receiving the immunization.  The regulation provides a list of methods for submitting the reports, while providing certain exceptions to the reporting requirements set forth in this regulation.
 
The regulation restricts read/write access to health care providers and state and local department of health staff, and gives read-only access to schools for the records of those children who are under their administrative responsibility.  The regulation delineates nine permitted uses of the information on this registry including for the purposes of health care, public health, outreach, quality improvement, epidemiological studies, disease control, etc.
 
The regulation requires that each person seeking access to the registry submit an application for access.  The regulation requires that, in order to secure the information, each person accessing the system have a distinct system ID and password with a level and type of access tied into it.  The regulation further requires that everyone accessing the registry understand and agree to adhere to the confidentiality protocol as developed by the department of health.
 
The regulation requires that health care providers reporting this information provide an informational brochure from the department of health to the parents of the child at the time of child’s initial entry into the registry, and that language accommodations be made for parents who speak a non-English primary language to ensure their understanding.