R384-203-2. Definitions

  The following definitions apply to this rule:

  (1) "Department" means the Utah Department of Health.

  (2) "Director" means the Utah Department of Health Executive Director.

  (3) "Prescription Drug Database" means the Utah Controlled Substance Database.

  (4) "Research facility" means a research facility associated with a university or college in the state accredited by one or more regional or national accrediting agencies recognized by the United States Department of Education.

  (5) "Institutional Review Board" means a board that is approved for human subject research by the United States Department of Health and Human Services.

  (6) "Designee" means a person designated and assigned by the Director to have access to data from the Prescription Drug database in order to conduct scientific studies regarding the use or abuse of controlled substances, who is not an employee of the Department.

  (7) "Business associate" means a business associate as defined under the HIPAA privacy, security, and breach notification rules in 45 CFR 164.502(a), 164.504(e), and 164.532(d) and (e).

  (8) "De-identified" means information as defined in 45 CFR 164.502(d) and 164.514(a), (b), and (c).