Section 16-29G-8 - Privacy; protection of information(a) The Health Care Authority shall ensure that patient specific protected health information be disclosed only in accordance with the patient's authorization or best interest to those having a need to know, in compliance with state confidentiality laws and the Health Insurance Portability and Accountability Act of 1996 and any amendments and regulations under the act.(b) The health information, data and records of the network shall be exempt from disclosure under the provisions of chapter twenty-nine-b of this code.