The agency, the agency's designees, such as subcontractors and business associates of the agency or the agency's designee, shall maintain the original direct personal identifiers in a separate database that is not linked with any other data and shall use a proxy or encrypted record identifier for data analysis.
Haw. Code R. § 11-188-25