Chapter DHS 120

DHS 120.31(4)(c)3. 3.

DHS 120.31(4)(c)3.a. a. If the department determines the request is reasonable, the department shall present the request to the IRB along with proposed remedies to assure confidentiality. If the IRB approves the request, the department may approve the request. The department may not release complete zip code data in the physician office data collection without IRB authorization.

DHS 120.31(4)(c)3.b. b. If the department approves the request, the requester shall either complete, sign and notarize a department data use agreement form or have a current signed and notarized department data use form filed with the department.

DHS 120.31(4)(c)3.c. c. If the department denies the request, the department shall notify the person making the request in writing of the reasons for the denial.

DHS 120.31(4)(d) (d) Requesting datasets containing patient-identifiable elements.

DHS 120.31(4)(d)1. 1. Persons requesting datasets containing patient-identifiable elements shall do all of the following:

DHS 120.31(4)(d)1.a. a. Work with the department to define the elements for the dataset.

DHS 120.31(4)(d)1.b. b. Provide the department written statutory evidence that the requester is entitled to have access to the data.

DHS 120.31(4)(d)1.c. c. Identify any statutes requiring the requester to uphold the patient confidentiality provisions specified in this subchapter or stricter patient confidentiality provisions than those specified in this subchapter. If these statutory requirements do not exist, the department shall require the requester to agree in writing to uphold the patient confidentiality provisions in this subchapter.

DHS 120.31(4)(d)2. 2.

DHS 120.31(4)(d)2.a. a. The department shall determine whether it will comply with the request.

DHS 120.31(4)(d)2.b. b. If the department approves the request, the requester shall either complete, sign and notarize a department data use agreement form or have a current signed and notarized department data use form filed with the department.

DHS 120.31(4)(d)2.c. c. If the department denies the request, the department shall notify the requester in writing of the reason for the denial.

DHS 120.31(4)(e) (e) Requesting custom analyses.

DHS 120.31(4)(e)1. 1. The requester and the department shall determine the level of specificity of data elements to be provided in the department’s analysis.

DHS 120.31 Note Note: A major concern of the Department is to preserve patient data confidentiality. As the geographic unit of requested information becomes smaller, i.e., specific zip codes, it becomes harder to preserve patient privacy. Therefore, in those instances where persons request information disaggregated to the level of zip code and the population of patients in the zip code is small enough to identify individual persons, the Department will use the procedures in sub. (4) (c) 2. to preserve patient privacy.

DHS 120.31(4)(e)2. 2.

DHS 120.31(4)(e)2.a. a. The department shall determine whether it will comply with the request.

DHS 120.31(4)(e)2.b. b. If the department approves the request, the requester shall either complete, sign and notarize a department data use agreement form or have a current signed and notarized department data use form filed with the department.

DHS 120.31(4)(e)2.c. c. If the department denies the request, the department shall notify the requester in writing of the reason for the denial.

DHS 120.31(5) (5) Department charges for custom-designed reports and custom analyses of data.

DHS 120.31(5)(a) (a) If, upon request, the department initiates preparation of custom-designed reports or custom analyses that are based on information collected by the department, the department shall charge fees, payable by the requester.

DHS 120.31(5)(b) (b) The fees charged by the department under par. (a) shall be commensurate with the actual necessary and direct costs associated with the data collection, analyses, compilation and dissemination of the report or analyses. In calculating its costs, the department shall take into account all of the following:

DHS 120.31(5)(b)1. 1. Type of data.

DHS 120.31(5)(b)2. 2. Record count and computer time required.

DHS 120.31(5)(b)3. 3. Access fees for computer time.

DHS 120.31(5)(b)4. 4. Staff time expended to process the request.

DHS 120.31(5)(b)5. 5. Handling and shipping charges.

DHS 120.31(5)(c) (c) Custom data requests that require IRB approval shall be paid in advance of the department’s processing of the request.

DHS 120.31(6) (6) Public use data file requests.

DHS 120.31(6)(a) (a) In addition to the reports under ss. DHS 120.20 and 120.29, the department shall respond to requests by individuals, agencies of government and organizations in the private sector for public use data files, data to fulfill statutory mandates for epidemiological purposes or to minimize the duplicate collection of similar data elements, and information that identifies a physician. The board shall designate the manner in which the data for these requests shall be made available. The department shall charge persons requesting the data fees that are commensurate with the actual and necessary direct costs of producing the requested data.

DHS 120.31(6)(b) (b) Excepting directories resulting from information reported under ss. DHS 120.13 (2) and (3) and 120.14, the department shall not identify specific patients, employers or health care providers who are individuals in any public use data file released by the department. Prior to the release of a public use data file, the department shall protect the identification of specific patients, employers and health care providers who are individuals by all necessary means, including the deletion of patient identifiers and the use of calculated variables and aggregate variables.

DHS 120.31 History History: Cr. Register, December, 2000, No. 540, eff. 1-1-01; corrections in (4) (a) 2. made under s. 13.93 (2m) (b) 7., Stats., Register, June, 2001, No. 546; CR 01-051: am. (3) (c), Register September 2001 No. 549 eff. 10-1-01.