(1) Subject to Subsection (2), the department shall make aggregate data produced under this part available to the public through a standardized application program interface format.
(2)
(a) The department shall ensure that data made available to the public under Subsection (1):
(i) does not contain identifiable health data of a patient; and
(ii) meets state and federal data privacy requirements, including the requirements of Section 26B-8-506.
(b) The department may not release any data under Subsection (1) that may be identifiable health data of a patient.