13-60-103. Limitations.
This part does not apply to:
(1) protected health information that is collected by a covered entity or business associate as those terms are defined in 45 C.F.R.and;
(2) a public or private institution of higher education; or
(3) an entity owned or operated by a public or private institution of higher education.