120265.1.
(a) (1) The department shall create a program to provide expedited release, during a declared public health emergency, of health care data, including from Confidential Morbidity Reports and contact tracing reports, to researchers at a bona fide research institution of higher education. The department shall make the data available promptly, and on an ongoing basis, only to qualified researchers who sign a memorandum of understanding (MOU) with the department agreeing to use the data only for public health research purposes, to not disclose it to any other party, and to keep all personal information confidential.(2) The program shall create a special Institutional Review Board to review requests submitted under paragraph (1) and to approve or reject the requests within 15 days of receiving a completed application.
(3) In order to protect the personal privacy of individuals, and to promote holding recipients of personal information fully and legally accountable for individuals’ privacy, each MOU shall be published in full and available to the general public on the department’s internet website within 1 business day of the department agreeing to it, and shall identify each institution that receives personal information under that MOU, including the names and institutional affiliations of the principal investigators who are conducting the research and a copy of the actual research proposal for which the department entered into the MOU.
(4) A person who accesses or obtains nonpublic personal data shall sign an MOU. Violation of an MOU shall be considered a violation of Section 1798.56 of the Civil Code and, if applicable, Section 1798.57 of the Civil Code.
(b) For purposes of this section, a “bona fide research institution of higher education” means a campus of the University of California or independent institutions of higher education, as defined in subdivision (b) of Section 66010 of the Education Code, that offer postgraduate degrees in public health.
(c) The department shall implement this chapter only upon an appropriation by the Legislature for these purposes in the annual Budget Act or another statute.
(d) This section shall not alter or reduce the obligations of the department under Chapter 1 (commencing with Section 1798) of Title 1.8 of Part 4 of Division 3 of the Civil Code, including, but not limited to, subdivision (t) of Section 1798.24.
(e) This section shall not authorize the release of these records to researchers by a local health department or any entity other than the State Department of Public Health.