Can I collect third-party data from participants in Kansas? What are the requirements?

To collect third-party data from participants in Kansas, you must comply with the state’s data privacy laws. The Kansas Health Information Technology Act establishes standards for the approval and operation of statewide and regional health information organizations operating in the state as approved health information organizations ^[1.2]. Additionally, each public agency in Kansas which maintains public records shall designate a local freedom of information officer ^[6.2].

To obtain access to public records, each public agency shall adopt procedures to be followed in requesting access to and obtaining copies of public records ^[6.1]. A public agency may require a written request for inspection of public records but shall not otherwise require a request to be made in any particular form. Except as otherwise provided by subsection (c), a public agency shall not require that a request contain more information than the requester’s name and address and the information necessary to ascertain the records to which the requester desires access and the requester’s right of access to the records ^[6.1].

Therefore, to collect third-party data from participants in Kansas, you must comply with the Kansas Health Information Technology Act and obtain access to public records through the designated procedures of each public agency.

Source(s):

• [1.2] Same; health information organizations; standards for approval and operation.
• [6.1] Procedures for obtaining access to or copies of records; request for records; establishing office hours for inspection; custodian of records, duties; provision of information on procedures.
• [6.2] Local freedom of information officer.

Jurisdiction

Kansas

• Privacy