Section 550.130  Confidentiality


a)         All reports and records made pursuant to the Act and maintained by the Department and other appropriate persons, officials and institutions pursuant to the Act shall be confidential. Information shall not be made available to any individual or institution except to:


1)         Appropriate staff of the Department;


2)         Any person engaged in a bona fide research project, with the permission of the Director of Public Health, except that no information identifying the subjects of the reports or the reporters shall be made available to researchers unless the Department requests and receives consent for such release pursuant to the provisions of this Section; and


3)         The Council, except that no information identifying the subjects of the reports or the reporters shall be made available to the Council unless consent for release is requested and received pursuant to the provisions of this Section. Only information pertaining to head and spinal cord injuries as defined in Section 1 of the Act shall be released to the Council. (Section 3 of the Act)


b)         The Department shall not reveal the identity of a patient, physician or hospital, except that the identity of the patient may be released upon written consent of the patient, parent (in the case of a minor patient) or guardian, the identity of the physician may be released upon written consent of the physician; and the identity of the hospital may be released upon written consent of the hospital. (Section 3 of the Act)


c)         The Department shall request consent for release from a patient, a physician or hospital only upon a showing by the applicant for such release that obtaining the identities of certain patients, physicians or hospitals is necessary for his bona fide research directly related to the objectives of the Act. (Section 3 of the Act)


d)         The Department shall at least annually compile a report of the data accumulated through the reporting system established under Section 2 of the Act and shall submit such data relating to spinal cord and head injuries in accordance with confidentiality restrictions established pursuant to the Act to the Council. (Section 3 of the Act)


e)         All requests by medical or epidemiologic researchers for confidential Registry data must be submitted in writing to the Registry. The request must include a study protocol that contains:  objectives of the research; rationale for the research including scientific literature justifying the current proposal; overall study methods, including copies of forms, questionnaires, and consent forms used to contact facilities, physicians or study subjects; methods for the processing of data; storage and security measures taken to ensure confidentiality of patient and facility identifying information; time frame of the study; a description of the funding source of the study (e.g., federal contract); the curriculum vitae of the principal investigator and a list of collaborators. In addition, the research request must specify what patient or facility identifying information is needed and how the information will be used.


f)         All requests to conduct research and modifications to approved research proposals involving the use of data that includes patient or facility identifying information shall be subject to a review to determine compliance with the following conditions:


1)         The request for patient or facility identifying information contains stated goals or objectives.


2)         The request documents the feasibility of the study design in achieving the stated goals and objectives.


3)         The request documents the need for the requested data to achieve the stated goals and objectives.


4)         The requested data can be provided within the time frame set forth in the request.


5)         The request documents that the researcher has qualifications relevant to the type of research being conducted.


6)         The research will not duplicate other research already underway using the same registry data when both require the contact of a patient, reporting facility or physician about an individual patient involved in the previously approved concurrent research.


7)         Other such conditions relevant to the need for the patient or facility identifying information and the patient's confidentiality rights because the Department will only release the patient, physician in accordance with the provisions of this Section, or facility identifying information that is necessary for the research.


g)         The Department will enter into a Research Agreement for all approved research requests. The Agreement shall specify the information that is being released and how it can be used, in accordance with subsection (c) above.


h)         Every hospital shall provide representatives of the Department with access to information from all medical, pathological, and other pertinent records and logs related to reportable registry information. The Department shall not require hospitals to provide information on cases that are dated more than two years before the Department's request for further information.


i)          Every hospital shall provide access to information regarding specified patients or other patients specified for research studies, related to reportable registry information, conducted by the Department.


(Source:  Amended at 22 Ill. Reg. 5047, effective March 10, 1998)