Information from the Network shall be used only in ways that reflect responsible public health protocols and practice. (b) The Commissioner shall take measures necessary to comply with the federal 'Standards for Privacy of Individually Identifiable Health Information' contained in Parts 160 and 164 of Title 45 of the Code of Federal Regulations, 45 CFR §§ 160.101 et seq. and 45 CFR §§ 164.102 et seq., and any subsequent amendments, including the following: (1) security procedures limiting access to Network data;(2) a confidentiality statement to be signed by staff members;(3) encryption of identifying information; and(4) use of information for research and assessment purposes. (Added 2003, No. 32, § 3; amended 2017, No. 46, § 37, eff. July 1, 2019.)
Vermont Legal Code