Delaware’s health data network shares claims and clinical information under privacy rules

DHIN serves as Delaware’s sanctioned health data utility and may make business arrangements to further its mission. DHIN serves Delaware health care providers and other stakeholders. A business arrangement does not make DHIN a health-care provider.

DHIN sets rules for sharing patient-specific information and reviewing requests for clinical data. These rules cover patient-specific health information and clinical data held by DHIN, including data requested for research or analysis. Patient information may be shared for care, payment, operations, public health, and other purposes allowed by federal privacy law. Before providing patient-specific data under subsection (e), DHIN must obtain written consent or take reasonable steps to ensure the sharing is permitted by federal privacy law and the Common Rule. A majority of the DHIN board or its designated review subcommittee must approve a clinical data request.

DHIN provides specified state agencies free access to claims data sets and sets rules for access to clinical information derived from claims. Named agencies include the Office of Management and Budget, State Employee Benefits Committee, Division of Public Health, and other listed state bodies. Individuals, providers, and other permitted users may access the clinical information. The clinical information released must exclude pricing details and follow DHIN’s access and use rules. Access remains subject to laws and rules governing DHIN’s health information exchange services.