(1) The division shall receive a result of a blood or urine test report in accordance with Title 26B, Chapter 8, Part 4, Health Statistics.
(2)
(a) The division may only use an individual's personally identifiable health data from a blood and urine test in connection with:
(i) an administrative hearing involving that individual;
(ii) in accordance with Title 63G, Chapter 4, Part 3, Agency Review, an agency review of the administrative hearing described in Subsection (2)(a)(i); or
(iii) in accordance with Title 63G, Chapter 4, Part 4, Judicial Review, a judicial review of the administrative hearing described in Subsection (2)(a)(i).
(b)
(i) The division shall aggregate and anonymize data from a blood and urine test.
(ii) The division may only use the anonymized and aggregated data from blood and urine tests:
(A) to create a report required or requested by the Legislature; or
(B) to create statistical reports for criminal justice agencies.
(3) The division shall securely retain each blood and urine test as a private record as provided in Title 63G, Chapter 2, Government Records Access and Management Act.
(4) The division may provide the information from a blood and urine test received under this section:
(a) to the individual who is the subject of the blood and urine test;
(b) to the individual's attorney in connection with an administrative proceeding before the division; or
(c) as otherwise required by law.