Attachment 6 Agreement to Abide by Restrictions

Attachment 6. Agreement to Abide by the Restrictions on
Release of Surveillance Data

Agreement to abide by restrictions on release of surveillance data collected and
maintained by the Division of HIV/AIDS Prevention - Surveillance and Epidemiology

I, ___________________________, understand that data collected by CDC through the HIV/AIDS
surveillance system and related surveillance activities, projects, and case investigations under
Section 306 of the Public Health Service Act (42 U.S.C. 242k) is protected at the national level by
an Assurance of Confidentiality (Section 308(d) of the Public Health Service Act, 42 U.S.C.
242m(d)), which prohibits disclosure of any information that could be used to directly or indirectly
identify any individual on whom a record is maintained by CDC. This prohibition has led to the
formulation of the following guidelines for release of HIV/AIDS case reports and supplemental
data collected on such persons to which, in accepting access to data not considered public-use, I
agree to adhere. These guidelines represent a balance between potential for inadvertent
disclosure and the need for the CDC/DHAP-SE to be responsive to information requests having
legitimate public health application. In particular, variables that identify geographic units or
facilities have the potential to indirectly identify individuals.
Therefore, I will not release, either inside or outside CDC, State/Territorial, MSA, city or county
specific data in any format (e.g., publications, presentations, slides, interviews) without the
consent of the appropriate State or local agency, except as consistent with the format described
below and presented in detail in the written documentation for the AIDS Public Information Data
Set (AIDS PIDS). Specifically, in accordance with the terms of written agreements between CDC,
the Council of State and Territorial Epidemiologists (CSTE), and individual State/Territorial health
departments AND in accordance with the principles of the Assurance of Confidentiality for
HIV/AIDS surveillance and related data authorized under Section 308d of the U.S. Public Health
Service Act:


I am permitted to release national and regional tabulations, from the HIV/AIDS
surveillance database in either narrative or tabular format.



For cases in adults/adolescents > 13 years of age, for MSA’s with greater than 500,000
population, I may release multiple-way cross tabulations of 14 variables using the
categories and conditions listed in the current AIDS PIDS for the rectangular data file.



For any State, the District of Columbia, or MSA with greater than 500,000 population, I
may release 2-way cross tabulations of 8 variables using the categories listed in the
current AIDS PIDS if cell sizes are all greater than 3. If cells containing information on 3
or fewer cases are produced, I agree to either delete those cells and all summaries using
those cells from the table, or insert in any cell of 3 or less, the notation “less than or
equal to 3."



For any MSA with greater than 100,000 population in selected States designated in the
current AIDS PIDS, I may release 2-way cross tabulations of 8 variables using the
categories and conditions listed in the current AIDS PIDS if cell sizes are all greater than
3. If cells containing information on 3 or fewer cases are produced, I agree to either
delete those cells and all summaries using those cells from the table, or insert in any cell
of 3 or less, the notation “less than or equal to 3."



For individual counties or health districts in selected States designated in the current
AIDS PIDS, I may release one-way frequencies of 3 variables ( age, race/ethnicity, and
sex) subject to the small cell size restriction described above.



I understand that release of data not specifically permitted by this agreement is
prohibited unless written permission is first obtained from the appropriate Branch Chief
(HICSB or BCSB), Division of HIV/AIDS Prevention - Surveillance and Epidemiology.



When presenting or publishing state, city, county, or MSA-specific data in accordance
with the restrictions outlined above, I will inform the appropriate state and local health
departments in advance of the release of state or local data, so as to afford them the
opportunity to anticipate local queries and prepare their response.



When presenting or publishing data from surveillance-related studies, investigations, or
evaluations, I will adhere to the principles and guidelines outlined in this agreement.

I also agree to the following:
I will not give my access password to any person.
I will treat all data at my desk site confidentially and maintain records that could directly or
indirectly identify any individual on whom CDC maintains a record in a locked file cabinet.
Sensitive identifying information from special case investigations will only be maintained in a
locked file cabinet in a locked room which has restricted access.
I will keep all hard copies of data runs containing small cells locked in a file cabinet when not in
use, shredding them when they are no longer necessary to my analysis.
I will not produce a “back-up” data file of HIV/AIDS case surveillance data or related databases
maintained by DHAP-SE.
I will not remove electronic files, records or databases from the worksite.
I will not remove hard copies of case reports, survey instruments, laboratory reports, confidential
communications, or any records containing sensitive data and information or the like from the
worksite.
I will not remove from the worksite tabulations or data in any format that could directly or indirectly
identify any individual.
I will maintain confidentiality of records on individuals in all discussions, communications, e-mails,
tabulations, presentations, and publications (and the like) by using only the minimum information
necessary to describe the individual case.
I will not release data to the press or media without pre-screening of the request by the Office of
Communications, NCHSTP.
I am responsible for obtaining IRB review of projects when appropriate.
User ID: __________________
Purpose of investigation (provide a brief statement):

Database(s) to be accessed:

Estimated time needed for data access/analysis:
I have read this document, “Agreement to abide by restrictions on release of data...” and
the attached document “Release of CDC HIV/AIDS Surveillance and Related Data,” and I
agree to abide by them. Failure to comply with this agreement may result in disciplinary

action, including possible termination of employment.
Signed: __________________________________ Date: ______________________
(Requestor)
CIO, Division, Branch _______________________________
Approved: ________________________________ Date: ______________________
Chief, (HICSB/BCSB), DHAP-SE, NCHSTP or designee
Revised December, 2003