{"data":{"id":"us-dc/d.c.-code-7-242","jurisdiction":"us-dc","citation":"D.C. Code § 7-242","heading":"Use and disclosure of health and human services information.","body":"\n      *NOTE: This section includes amendments by emergency legislation that will expire on November 8, 2026. To view the text of this section after the expiration of all emergency and temporary legislation, click this link: Permanent Version.*\n      \n\n(a)\nWithout prior consent from the identified individual, an agency or service provider may use and shall disclose to another agency or service provider health and human services information referencing or relating to the identified individual for the following purposes; provided, that the use or disclosure is not specifically prohibited under District or federal law:\n(1)\nTo establish the identified individual’s eligibility for, or determine his or her amount and type of:\n(A)\nTreatment;\n(B)\nServices;\n(C)\nBenefits;\n(D)\nSupport; or\n(E)\nAssistance;\n(2)\nTo coordinate for the identified individual, his or her:\n(A)\nTreatment;\n(B)\nBenefits;\n(C)\nServices;\n(D)\nSupport; or\n(E)\nAssistance;\n(3)\nTo conduct oversight activities, including:\n(A)\nManagement;\n(B)\nFinancial and other audits;\n(C)\nProgram evaluations;\n(D)\nPlanning;\n(E)\nInvestigations;\n(F)\nExaminations;\n(G)\nInspections;\n(H)\nQuality reviews;\n(I)\nLicensure;\n(J)\nDisciplinary actions; or\n(K)\nCivil, administrative, or criminal proceedings or actions;\n(4)\nTo conduct research related to treatment, benefits, services, supports, and assistance; provided, that:\n(A)\nHealth and human services information referencing or relating to an identified individual shall not be disclosed in a manner that would permit the identity of the individual to be reasonably inferred by either direct or indirect means; and\n(B)\nThe agency or service provider receiving the health and human services information shall affirm in writing that any individually identifiable health information shall be treated in accordance with HIPAA; and\n(5)\nTo aid in the development of the reports required by § 22-4234(b-3) and (d).\n\n(b)\nA service provider shall disclose health and human services information to an agency upon request by the agency; provided, that the disclosure and use of such information is in accordance with this chapter.\n\n(c)\nAn agency or service provider shall use or disclose individually identifiable health information in accordance with HIPAA.\n\n(d)\nWhen using or disclosing health and human services information, an agency or service provider shall make reasonable efforts to limit such information to the minimum amount necessary to accomplish the purpose of the use or disclosure.\n\n(e)\nAn agency or service provider that discloses health and human services information shall designate an individual responsible for:\n(1)\nResponding to requests for health and human services information from another agency or service provider, who shall:\n(A)\nRespond to a request within 48 hours;\n(B)\nNot unreasonably deny a request; and\n(C)\nWithin 5 business days of the date of the request, supply the requested information to the extent such request was approved; and\n(2)\nEnsuring that any health and human services information disclosed pursuant to § 7-243 is limited to the minimum amount of information necessary to accomplish the purpose of the disclosure.","path":["Title 7. Human Health Care and Safety.","Chapter 2B. Data Sharing."],"source_url":"https://code.dccouncil.gov/us/dc/council/code/sections/7-242","current_through":"2026-08-20 (D.C. Law 26-175)","vintage":"","retrieved_at":"2026-08-29T05:44:07Z","sha256":"6e19c4eddb1f24a178e5f642bf54a6f755f2fc730d127a83bdffcf14232f8507","source_id":"us-dc","stale":false,"prev":"us-dc/d.c.-code-7-241","next":"us-dc/d.c.-code-7-243"},"notice":"GroundRules: Original legal text. Not legal advice."}