D.C. Code § 7-1203.05
In addition to the disclosures authorized pursuant to Chapter 2B of this title [§ 7-241 et seq.], a mental health professional or mental health facility may disclose mental health information to qualified personnel, if necessary, for the purpose of conducting scientific research or management audits, financial audits or program evaluation of the mental health professional or mental health facility; provided, that such personnel have demonstrated and provided assurances, in writing, of their ability to insure compliance with the requirements of this chapter. Such personnel shall not identify, directly or indirectly, an individual client in any reports of such research, audit or evaluation, or otherwise disclose client identities in any manner; except, that de-identified data may be shared in accordance with the Health Insurance Portability and Accountability Act of 1996, approved August 21, 1996 (110 Stat. 1936; 42 U.S.C. § 1320d et seq.).
D.C. Code § 7-1203.05