Sec. 21. (a) Notwithstanding sections 1 through 14 of this chapter:
(1) a professional health care provider;
(2) a peer review committee; and
(3) the governing board of:
(A) a hospital;
(B) a preferred provider organization (including a preferred provider arrangement or reimbursement agreement under IC 27-8-11);
(C) a health maintenance organization (as defined in IC 27-13-1-19) or a limited service health maintenance organization (as defined in IC 27-13-34-4); or
(D) a professional health care organization;
may use information obtained by peer review committees for legitimate internal business purposes.
(b) Legitimate internal business uses of information obtained by a peer review committee include the following:
(1) Quality review and assessment.
(2) Utilization review and management.
(3) Risk management and incident reporting.
(4) Safety, prevention, and correction.
(5) Reduction of morbidity and mortality.
(6) Scientific, statistical, and educational purposes.
(7) Legal defense.