(1) The department's CYSHCN program has a federal mandate under Title V of the Social Security Act (42 U.S.C. 701 et seq.) to ensure that the HCA-medicaid program is made aware of medicaid-enrolled recipients of services through Title V. The purpose of this mandate is to ensure the medicaid agency is able to identify a child or youth who has special health care needs in order for the authority to offer care coordination and other services.

(2) The department shall take appropriate measures to safeguard any information gathered, and shall share information with only those agencies with a legitimate need to know or to comply with federal law. Consent to share client information with agencies outside of the local CYSHCN agency requires a separate release of information form signed by the parent or guardian.

(3) The department may create and release data files for public use, provided that these files do not contain any direct or indirect patient identifiers.

(4) The following definitions apply for the purpose of this section:

(a) "Direct identifier" means a single data element that identifies an individual person.

(b) "Indirect identifier" means a single data element that on its own might not identify an individual person, but when combined with other indirect identifiers is likely to identify an individual person.