{"data":{"id":"us-il/410-ilcs-305-9.8","jurisdiction":"us-il","citation":"410 ILCS 305/9.8","heading":"Disclosure of limited data sets and de-identified information.","body":"Notwithstanding the provisions of Sections 9 and 10 of this Act:\n(1) a covered entity may, without a patient's consent, create, use, and disclose a limited data set using HIV-related information from a patient's record or disclose HIV-related information from a patient's record to a business associate for the purpose of establishing a limited data set; the creation, use, and disclosure of such a limited data set must comply with the requirements set forth under HIPAA;\n(2) a covered entity may, without a patient's consent, create, use, and disclose de-identified information using information from a patient's record that is subject to this Act or disclose HIV-related information from a patient's record to a business associate for the purpose of de-identifying the information; the creation, use, and disclosure of such de-identified data must comply with the requirements set forth under HIPAA. A covered entity or a business associate may disclose information that is de-identified; and\n(3) the recipient of de-identified information shall not re-identify de-identified information using any public or private data source.","path":["CHAPTER 410 PUBLIC HEALTH","AIDS Confidentiality Act."],"source_url":"https://www.ilga.gov/legislation/ILCS/details?ActID=1550\u0026ChapterID=35\u0026ChapAct=FullText\u0026Print=True","current_through":"at least Public Act 104-790","vintage":"","retrieved_at":"2026-09-15T04:46:35Z","sha256":"9b8f3892c2404a867518f49e2af50a6c65f51da5aea99cdc8381692488448899","source_id":"us-il","stale":false,"prev":"us-il/410-ilcs-305-9.7","next":"us-il/410-ilcs-305-9.9"},"notice":"GroundRules: Original legal text. Not legal advice."}