(a) (1) The purpose of the system is to learn about and seek to improve public health, population health, social determinants of health, and the health care system, not about individual patients.
(2) All policies and procedures developed in implementing this chapter shall ensure that the privacy, security, and confidentiality of consumers’ individually identifiable health information is protected, consistent with state and federal privacy laws.
(b) The department shall develop policies regarding data aggregation and the protection of individual confidentiality, privacy, and security for individual consumers and patients.