(410 ILCS 527/20)
    Sec. 20. Confidentiality of information; release of information; statistics; panel on expanding access.
    (a) Records maintained as part of the immunization data registry are confidential.
    (b) The Department may release an individual's confidential information to the individual or to the individual's parent or guardian if the individual is less than 18 years of age.
    (c) Subject to subsection (d) of this Section, the Department may release information in the immunization data registry concerning an individual to the following entities:
        (1) The immunization data registry of another state.
        (2) A health care provider or a health care
    
provider's designee.
        (3) A local health department.
        (4) An elementary or secondary school that is
    
attended by the individual.
        (5) A licensed child care center in which the
    
individual is enrolled.
        (6) A licensed child welfare agency.
        (7) A college or university that is attended by the
    
individual.
        (8) The Department of Healthcare and Family Services
    
or a managed care entity contracted with the Department of Healthcare and Family Services to coordinate the provision of medical care to enrollees of the medical assistance program.
    (d) Before immunization data may be released to an entity, the entity must enter into an agreement with the Department that provides that information that identifies a patient will not be released to any other person without the written consent of the patient.
    (e) The Department may release summary statistics regarding information in the immunization data registry if the summary statistics do not reveal the identity of an individual.
(Source: P.A. 103-501, eff. 1-1-24.)