Department's duty to provide limited access to patient data

Department's duty to provide limited access to patient data. (a) The Department of Health and Human Services (Department) shall make available, at no charge and in a manner and format of its choosing, to any person or organization under contract with the Department to provide medical care quality improvement services, the minimum necessary data components of compiled patient data prepared for release or dissemination by a statewide data processor to the State Health Director pursuant to G.S. 131E-214.4(a)(7). The minimum necessary data components of compiled patient data shall be determined by the Department and are subject to any restrictions by the data owner. As used in this section, "medical care quality improvement services" means evaluation of medical quality of healthcare performance. (b) Any person or organization that receives patient data pursuant to this section is subject to the following requirements and limitations: (1) Is prohibited from using the patient data for any purpose other than to fulfill its performance under the terms of the contract with the Department. (2) Shall maintain the confidentiality of the data. (3) Shall not retain the data beyond the term of its contract with the Department. (2021-180, s. 9E.3(a).)