Hawaii Health Privacy Rights

Strict Privacy Law (historical): Hawaii had a pre-HIPAA law (HRS §323C, "Hawaii Health Privacy Project") which was quite strict on consent for disclosures. While parts have been superseded by HIPAA, Hawaii providers still generally require patient consent for releases beyond treatment purposes. For example, Hawaii law emphasizes that a patient's health information should not be used or disclosed without consent except as allowed by law, giving patients theoretical broad control (in practice it mirrors HIPAA's allowances now).

Minors: Hawaii allows certain minors to consent to treatment (e.g., for family planning) and keeps those records confidential from parents absent minor's consent.

Breach: Hawaii's breach law requires notice to individuals and the state if a breach involves personal info (including medical data). No unique timeline beyond the general 60 days.