Utah Code § 26B-8-507: Disclosure of identifiable health data prohibited.

(1)

(a) All information, reports, statements, memoranda, or other data received by the department are strictly confidential.

(b) Any use, release, or publication of the information shall be done in such a way that no person is identifiable except as provided in Sections 26B-8-506 and 26B-8-508.

(c) A person may not attempt to identify or re-identify an individual using data obtained under this part, including through data linking or correlation, except as provided in Sections 26B-8-506 and 26B-8-508.

(2) No member of the department may be held civilly liable by reason of having released or published reports or compilations of data supplied to the department, so long as the publication or release is in accordance with the requirements of Subsection (1).

(3) No person, corporation, or entity may be held civilly liable for having provided data to the department in accordance with this part.

(4) Except as specifically provided in this part, this part does not abrogate a person's claim to recover damage from another person for civilly liable conduct.