Can I collect health information from participants in North Carolina? What are the requirements?

To collect health information from participants in North Carolina, you must comply with the state’s laws and regulations. The North Carolina Health Information Exchange Authority oversees and administers the HIE Network in accordance with NCGS 90-414.7 ^[2.1]. The Authority has the power to ensure compliance with HIPAA and any rules adopted under HIPAA, including the Privacy Rule and Security Rule, and to establish fees for participation in the HIE Network. Additionally, certain providers of Medicaid services licensed to operate in the state that have an electronic health record system are required to submit demographic and clinical data through the statewide health information exchange network ^[2.2].

If you wish to collect health information from participants in North Carolina for bona fide research purposes, you may request the State Center for Health Statistics to release medical records of individual patients which identify the individual described in the record for such purposes, provided that the request is made in writing and contains specific information, and the Director of the State Center for Health Statistics grants the request ^[3.1].

It is important to comply with all relevant laws and regulations, including the on-site requirements for voluntary health care services ^[1.1].

Source(s):

• [1.1] On-site requirements.
• [2.1] North Carolina Health Information Exchange Authority.
• [3.1] RELEASE OF MEDICAL RECORDS FOR RESEARCH PURPOSES
• [2.2] Required participation in HIE Network for some providers.

Jurisdiction

North Carolina

• Privacy