Immunization Registry

HRS div. 1, tit. 19, ch. 325, pt. VIII

in effect

HRS §325-122 Hawaii immunization registry; establishment and purposes

325-122. Hawaii immunization registry; establishment and purposes The department of health may establish and maintain an immunization information system to be designated as the Hawaii immunization registry. The purposes of the registry shall be to maintain a single statewide repository of immunization records to aid, coordinate, and help promote efficient and cost-effective screening, prevention, and control of vaccine-preventable diseases, including pandemic influenza. [L 2010, c 113, pt of §1]

HRS §325-123 Confidentiality and content of registry records

325-123. Confidentiality and content of registry records (a) All immunization records and reports made for the purposes of this part that directly or indirectly identify a person shall be kept confidential and shall not be disclosed by any person unless: (1) The person identified, the person's legal guardian, or in the case of a minor, the minor's parent or legal guardian consents; (2) Disclosure is deemed necessary by the director of health to carry out this chapter; (3) A court directs upon its determination that disclosure is necessary for the conduct of proceedings before it; (4) The disclosure is made between the person's health care provider and payor to obtain reimbursement for services rendered to the person; provided that disclosure shall be made only if the provider informs the person that a reimbursement claim will be made to the person's payor, the person is afforded an opportunity to pay the reimbursement directly, and the person does not pay; or (5) The department of health releases aggregate immunization information that does not disclose any identifying information of persons whose information is maintained in the registry. (b) Registry information shall be limited to patient name, demographic information, and contact information; information specific to immunizations or medications received by the patient, including types, manufacturers, lot numbers, expiration dates, anatomical sites of administration, routes of administration, vaccine information statement publication dates, doses, dates administered, the patient's history of vaccine-preventable diseases, and contraindications, precautions, adverse reactions to, or comments regarding immunizations or medications; and the name and contact information of the vaccination administrator or medication provider and the patient's health care provider. (c) The department of health shall adopt administrative, physical, and technical measures to ensure the security of the registry; protect the confidentiality, integrity, and availability of registry data; and prevent unauthorized access to registry information. [L 2010, c 113, pt of §1; am L 2012, c 275, §2]

HRS §325-124 Purposes for access to registry information; access not a disclosure

325-124. Purposes for access to registry information; access not a disclosure (a) Notwithstanding section 325-123, it shall not be a disclosure for the persons listed in subsections (b), (c), (d), and (e) to have limited access to registry information for the purposes specified in each subsection. (b) Registry information regarding specific individuals in the registry may be accessed by authorized health care providers who are treating, have treated, or have been assigned to treat those individuals; by authorized employees of these health care providers; and by authorized department of health personnel assigned to monitor the immunization or health status of those individuals for the purposes of: (1) Recording the administration of any vaccination, including pandemic influenza vaccine; (2) Determining the immunization history of a patient to deliver health care treatment accordingly; (3) Notifying individuals or parents or legal guardians of the need to schedule a visit for an immunization; (4) Generating official immunization records; (5) Ensuring compliance with mandatory immunization requirements; (6) Recording the distribution of prophylactic and treatment medications administered or dispensed in preparation for and in response to a potentially catastrophic disease threat; or (7) Complying with Hawaii vaccines for children and other state-provided vaccine programs' vaccine ordering and accountability policies and procedures. (c) Registry information regarding specific individuals in the registry may be accessed by school and post-secondary school personnel authorized by the director of health, the superintendent of education, the director of the executive office on early learning, or the administrator of a private or post-secondary school for the purpose of ensuring compliance with mandatory student immunization requirements. (d) Registry information regarding specific individuals in the registry may be accessed by authorized health organizations that have been contracted to provide health insurance or health plan coverage for those individuals; provided that access is limited to only the enrollees, members, subscribers, and insureds of the authorized health organization, and for the purpose of producing immunization assessment reports by the authorized health organization. (e) Registry information regarding specific individuals in the registry may be accessed by the department of health or agents of the department of health for the purposes of: (1) Ensuring compliance with mandatory immunization requirements; (2) Performing immunization-related quality improvement or quality assessment activities; (3) Complying with Hawaii vaccines for children and other state-provided vaccine programs' vaccine ordering and accountability policies and procedures; (4) Producing aggregate immunization assessment reports to monitor and improve public health; (5) Supporting efforts to prevent and manage outbreaks of vaccine-preventable diseases, including pandemic influenza; (6) Assisting the department of health in the event of a public health emergency; or (7) Managing and maintaining the Hawaii immunization registry system. (f) The use of registry information accessed pursuant to this section shall be limited to the purposes for which access is granted. [L 2010, c 113, pt of §1; am L 2012, c 275, §3; am L 2018, c 175, §3]

HRS §325-125 Registry record requirements; duration of retention

325-125. Registry record requirements; duration of retention (a) The establishment of an individual's record in the registry shall not require the prior consent of a patient or the consent of a patient's parent or legal guardian in the case of a minor or dependent. (b) The department of health shall make available to the patient or the patient's parent or legal guardian in the case of a minor or dependent, via the patient's health care provider or birthing hospital, a written description of the purpose and benefits of the registry as well as the procedure for refusing inclusion in the registry. (c) A patient's, or in the case of a minor, the minor's parent's or legal guardian's, choice to refuse inclusion in the registry shall be documented in writing on a form or in a format approved by the department of health. (d) Each health care provider or birthing hospital shall maintain the records of refusal of inclusion and shall report any refusal to the department of health in a manner specified by rule. (e) When a patient, or in the case of a minor, the minor's parent or legal guardian, chooses to refuse inclusion in the registry, minimal demographic information, including the patient's name and date of birth, shall be maintained within the registry system to identify the patient as having elected to refuse inclusion in the registry. If the patient has an existing record in the registry at the time that the refusal documentation is submitted, all other patient demographic and immunization information shall be removed from the registry. (f) All registry authorized users shall make available for inspection by the department of health all medical records relating to patient demographic and immunization information recorded in the registry or documentation of the patient's, or in the case of a minor, the minor's parent's or legal guardian's refusal of inclusion in the registry for the purposes of performing registry-related quality improvement or quality assessment activities. (g) Registry information for any individual included within the registry shall be retained as a part of the registry for twenty-five years after the last entry, except in the case of minors, whose records shall be retained during the period of minority plus twenty-five years after the minor reaches the age of majority. At the conclusion of the retention period, the data stored in the registry for that individual shall be archived. [L 2010, c 113, pt of §1; am L 2012, c 275, §4]

HRS §325-126 Civil and criminal liability

325-126. Civil and criminal liability (a) Authorized users of the registry shall not be subject to civil liability for damages by reason of: (1) Providing information to the registry in good faith; or (2) Accessing and using information from the registry in good faith for the purposes specified in section 325-124. (b) Any person who intentionally or knowingly discloses registry information contrary to the confidentiality provisions of this part shall be guilty of a misdemeanor. [L 2010, c 113, pt of §1]

Source: Hawaii State Legislature (capitol.hawaii.gov), via Internet Archive capturesURL: http://www.capitol.hawaii.gov/hrscurrent/Vol06_Ch0321-0344/HRS0325/HRS_0325-.htmFetched: 11/10/2026