{"data":{"id":"us-il/410-ilcs-513-31.7","jurisdiction":"us-il","citation":"410 ILCS 513/31.7","heading":"Establishment and disclosure of limited data sets and de-identified information.","body":"(Text of Section before amendment by P.A. 104-642)\n(a) A covered entity may, without a genetic information test subject's consent, create, use, and disclose a limited data set using information subject to this Act or disclose information subject to this Act to a business associate for the purpose of establishing a limited data set. The creation, use, and disclosure of such a limited data set must comply with the requirements set forth under HIPAA.\n(b) A covered entity may, without a genetic information test subject's consent, create, use, and disclose de-identified information using information subject to this Act or disclose information subject to this Act to a business associate for the purpose of de-identifying the information. The creation, use, and disclosure of such de-identified information must comply with the requirements set forth under HIPAA. A covered entity or a business associate may disclose information that is de-identified in accordance with HIPAA.\n(c) The recipient of de-identified information shall not re-identify de-identified information using any public or private data source.\n(Text of Section after amendment by P.A. 104-642)\nEstablishment and disclosure of limited data sets and de-identified information.\n(a) A covered entity may, without a genetic information test or biomarker test subject's consent, create, use, and disclose a limited data set using information subject to this Act or disclose information subject to this Act to a business associate for the purpose of establishing a limited data set. The creation, use, and disclosure of such a limited data set must comply with the requirements set forth under HIPAA.\n(b) A covered entity may, without a genetic information test or biomarker test subject's consent, create, use, and disclose de-identified information using information subject to this Act or disclose information subject to this Act to a business associate for the purpose of de-identifying the information. The creation, use, and disclosure of such de-identified information must comply with the requirements set forth under HIPAA. A covered entity or a business associate may disclose information that is de-identified in accordance with HIPAA.\n(c) The recipient of de-identified information shall not re-identify de-identified information using any public or private data source.","path":["CHAPTER 410 PUBLIC HEALTH","Genetic Information Privacy Act."],"source_url":"https://www.ilga.gov/legislation/ILCS/details?ActID=1567\u0026ChapterID=35\u0026ChapAct=FullText\u0026Print=True","current_through":"at least Public Act 104-790","vintage":"","retrieved_at":"2026-09-15T04:46:36Z","sha256":"9370cc6316a2b7386a7de6f78bd36c532a2375a61a46b7d7d452bac22d98a12d","source_id":"us-il","stale":false,"prev":"us-il/410-ilcs-513-31.6","next":"us-il/410-ilcs-513-31.8"},"notice":"GroundRules: Original legal text. Not legal advice."}