Section 11-160-56 - Confidential information; exceptions(a) All information received and records kept -by the department for purposes of administering this chapter are confidential and not subject to disclosure except to: (1) Employees or agents of the department as necessary to perform their official duties under this chapter;(2) Federal, state, or local law enforcement agencies for the purpose of verifying registration with the department pursuant to this chapter or for official law enforcement purposes;(3) A person or entity pursuant to an order or subpoena from a court or agency of competent jurisdiction;(4) A person or entity with the written permission of the qualifying patient or, if the qualifying patient is a minor or an adult lacking legal capacity, of the qualifying patient's parent, guardian, or person having legal custody;(5) A person or entity with the written permission of the qualifying out-of-state patient or, if the qualifying out-of-state patient is a minor, of a caregiver of a qualifying out-of-state patient;(6) Employees or agents of the State's medical cannabis dispensary system;(7) Employees or agents of the department's contracted computer software tracking system used within the State's medical cannabis dispensary system;(8) Medical cannabis dispensary system licensees as deemed necessary by the department for purposes of:(A) Verifying the status of a person as a qualifying patient, primary caregiver, qualifying out-of-state patient, or caregiver of a qualifying out-of-state patient; and(B) Tracking a qualifying patient's or a qualifying out-of-state patient's allowable cannabis purchase limits; and(9) Other persons or entities deemed necessary by the department to administer this chapter or the State's medical cannabis dispensary system.(b) Nothing in this section precludes the department from the following; (1) Notifying law enforcement or relevant authorities about falsified or fraudulent information submitted to the department;(2) Notifying state or local law enforcement about suspected criminal violations; and(3) Publishing non-identifying aggregated data or statistics of program information.Eff 7/18/2015 (Auth: HRS § 321-9) (Imp: HRS §§ 92F-13, 329-123) [Am 11/24/2016] (Auth: HRS § 329D-27) (Imp: HRS § 329D-6) Am and comp 2/25/2019 (Imp: 329-123.5; SLH 2017, Act 170, §2)