44-8003. Exceptions
This chapter does not apply to any of the following:
1. Protected health information that is collected by a covered entity or business associate governed by the privacy, security and breach notification rules issued by the United States department of health and human services under 45 Code of Federal Regulations parts 160 and 164.
2. Biological samples that are obtained or genetic data that is generated for the purposes of an individual's medical screening, treatment or diagnosis.
3. Genetic data that is generated by analyses or tests described in section 12-2801, paragraph 1, subdivision (b).
4. A public or private institution of higher education or an entity that is owned or operated by a public or private institution of higher education.