641—52.9 (135) Iowa’s child vision screening database module and follow-up. The department may develop and maintain a statewide child vision screening database module in IRIS to collect and maintain child vision screening results, to ensure students receive the required vision screening, and to monitor eye health.
	   52.9(1) The database module shall consist of vision screening information, including identifying and demographic data.
	   52.9(2) Database module reporting shall comply with rule 641—52.7(135).
	   52.9(3) Restricted uses of database module. The database module information shall not be used to:
	      a.    	 Market services to students or nonstudents;
	      b.    	 Assist in bill collection services; or
	      c.    	 Locate or identify students or nonstudents for any purpose other than those expressly provided in this rule.
	   52.9(4) Confidentiality of database module information. Child vision screening information, including identifying and demographic data maintained in the database module, is confidential and may not be disclosed except under the following limited circumstances:
	      a.    	 The department may release information from the database module to the following:
	       (1)  	 The person who received the child vision screening or the parent or guardian of the person who received the child vision screening;
	       (2)  	 Users of the database module that complete an agreement with the department that specifies the conditions under which the database module can be accessed and that have been issued an organization code and username by the department;
	       (3)  	 Persons or entities requesting child vision screening data in an aggregate form that does not identify an individual either directly or indirectly;
	       (4)  	 Agencies that complete an agreement with the department which specifies conditions for access to database module information and how that information will be used;
	       (5)  	 A representative of a state or federal agency, or an entity bound by that state or federal agency, to the extent the information is necessary to perform a legally authorized function of the agency or the department. The state or federal agency is subject to confidentiality regulations that are the same as or more stringent than those in the state of Iowa; or
	       (6)  	 Licensed health care providers, agencies, and other persons involved with vision screenings, eye examinations, follow-up services, and intervention services as necessary to administer this chapter.
	      b.    	 Approved database module users shall not release child vision screening data except to the person who received the child vision screening; the parent or guardian of the person who received the child vision screening; health records staff of schools; medical, optometry, ophthalmology or health care providers providing continuity of care; and other approved users of the database module.
[ARC 1924C, IAB 4/1/15, effective 5/6/15]