Except as otherwise provided in state or federal law, an individual has the right to opt out of having the individual’s individually identifiable health information accessible through a health information organization by providing notice as explained in the health information organization’s notice of health information practices. If an individual provides a notice of opt out to a health care provider, the health care provider must promptly provide that notice to the health information organization in the manner provided in the health information organization’s policies. A decision to opt out of having individually identifiable health information accessible through the health information organization may be changed by an individual at any time by providing notice as explained in the health information organization’s notice of health information practices. Individuals who previously elected to opt out of having a particular health care provider’s data accessible through the health information organization will be treated by the health information organization as having elected to opt out under this section within ninety days after August 27, 2019.