Can I collect location information from participants in North Dakota? What are the requirements?

Based on the provided context documents, you can collect location information from participants in North Dakota for treatment, payment, and health care operations purposes ^[1.2]. However, you must comply with the North Dakota health information network policies and procedures, which include identifying all authorized users, providing training for authorized users, and notifying the network of any revocation or suspension of access authority ^[1.1].

Additionally, you must comply with the security requirements under 28 C.F.R. Part 20 and NCIC ^[2.1]. You must also use appropriate safeguards to prevent use or disclosure of protected health information other than permitted by the North Dakota health information network policies, including appropriate administrative, physical, and technical safeguards that protect the confidentiality, integrity, and availability of protected health information through the North Dakota health information network ^[1.5].

It is important to note that you cannot use or disseminate criminal history record information exchanged between criminal justice agencies for purposes other than those for which it was originally obtained ^[3.1].

Therefore, to collect location information from participants in North Dakota, you must comply with the North Dakota health information network policies and procedures, security requirements, and appropriate safeguards.

In summary, you can collect location information from participants in North Dakota for treatment, payment, and health care operations purposes. However, you must comply with the North Dakota health information network policies and procedures, security requirements, and appropriate safeguards. You cannot use or disseminate criminal history record information exchanged between criminal justice agencies for purposes other than those for which it was originally obtained.

Source(s):

• [1.1] Authorized participants.
• [1.2] Use and disclosure of protected health information.
• [2.1] Security requirements.
• [3.1] Limitation on use of exchanged information.
• [1.5] Privacy and security protections.

Jurisdiction

North Dakota

• Privacy