SURS shall comply with the uses and disclosures of Protected Health Information, permitted by the Health Insurance Portability and Accountability Act (HIPAA), where applicable as outlined in the Program documents.
Ill. Admin. Code tit. 80, § 2180.360