Section 70. Release of VIIS data

A. Specific patient data shall not be disclosed except to the extent required or permitted by state and federal law or regulations, after contacting VDH. VDH will verify the source of the request.

B. Specific patient data may be disclosed to health care entities to the extent required or permitted by state and federal law or regulations. See subsection E of § 32.1-46 and § 32.1-127.1:03 of the Code of Virginia.

C. Patient data shall be erased when no longer needed, when the computer is being terminated, or in accordance with a data sharing agreement or a participant registration agreement with VDH.

D. Aggregate data from which personal identifying data has been removed or redacted may be released for the purposes of statistical analysis, research, or reporting only after approval by VDH.

E. Any inappropriate use of VIIS data shall result in immediate suspension of user privileges and result in an investigation conducted by VDH. Additional actions may be taken in accordance with § 32.1-27 of the Code of Virginia. The VIIS program manager may reinstate privileges upon satisfactory completion of required remedial actions and guarantee of proper use of VIIS in the future.

Historical Notes

Derived from Volume 31, Issue 22, eff. July 31, 2015.

Statutory Authority

§ 32.1-46.01 of the Code of Virginia.