(a) All chronic kidney disease, stroke and diabetes data provided to the Registry must be kept confidential. No information reported to the Registry which identifies or could lead to the identification of an individual patient may be disclosed to any person or entity; except that the identifying information may be disclosed to another state chronic kidney disease, stroke and diabetes registry and territorial health officers.
(b) State chronic kidney disease, stroke and diabetes registries, chronic kidney disease, stroke and diabetes researchers or federal chronic kidney disease, stroke and diabetes control agencies that receive chronic kidney disease, stroke and diabetes case data from the Registry shall enter into an agreement with the Registry to keep the information confidential.
(c) All Registry employees and researchers shall sign a confidentiality agreement. These agreements remain effective after the employee or researcher no longer has a relationship with the Registry and will expire after two years.