All reports of cancer cases received by the Colorado Department of Public Health and Environment, in connection with the registry, from hospitals and the other designated sources shall be and remain strictly privileged and confidential as "medical records AND reports" within the purview and intent of Section 25-1-122(4), Colorado Revised Statutes.
Such reports and records shall not be released, shared with any agency or institution, or made public upon subpoena, search warrant, discovery proceedings, or otherwise, except under any of the following circumstances:
The Department may exchange personal data with the National Cancer Institute, the Centers for Disease Control and Prevention, the North American Association of Central Cancer Registries, and any other governmental agency or contractual designee for the purpose of medical or scientific research, provided such entity, governmental agency, or contractual designee shall not further disclose information that is confidential under this section.
The Department is further authorized to acquire cancer data concerning Colorado residents from other states, and, in return, to provide those states with data relating to their residents.
6 CCR 1009-3-IV