Haw. Code R. § 12-55-1
HIOSH access to employee medical records will in certain circumstances be important to the division's Performance of its statutory functions. Medical records, however, contain personal details concerning the lives of employees. Due to the substantial personal privacy interests involved, HIOSH authority to gain access to personally identifiable employee medical information shall be exercised only after HIOSH has made a careful determination of its need for this information, and only with appropriate safeguards to protect individual privacy. Once this information is obtained, HIOSH examination and use of it will be limited to only that information needed to accomplish the purpose of access. Personally identifiable employee medical information will be retained by HIOSH only for so long as needed to accomplish the purpose of access, shall be kept secure while being used, and shall not be disclosed to other agencies or members of the public except in narrowly defined circumstances.
Haw. Code R. § 12-55-1