N.D. Cent. Code § 23-01.3-02
Protected health information in possession of a public health authority may be disclosed only as authorized by this chapter or another law of this state explicitly authorizing the disclosure of that information, except that protected health information received or maintained under chapter 23-01.1 may be disclosed only as authorized by that chapter. Subject to section 23-01-15, subsection 1 of section 23-07-02.2, and any other requirements of this title, this chapter does not prohibit a public health authority from disclosing protected health information for use in a biomedical research project approved by an institutional review board or a privacy board or protected health information that has been transformed to protect the identity of the patient through coding or encryption if the information is disclosed for use in an epidemiological or statistical study.
N.D.C.C. § 23-01.3-02