(a) Except as provided in N.C. Gen. Stat. § 132-5 and N.C. Gen. Stat. § 122C-31(h), confidential information acquired in attending or treating a client is not a public record under Chapter 132 of the N.C. Gen. Stat..

(b) Except as authorized by N.C. Gen. Stat. § 122C-53 through N.C. Gen. Stat. § 122C-56, no individual having access to confidential information may disclose this information, provided, however, a HIPAA covered entity or business associate receiving confidential information that has been disclosed pursuant to N.C. Gen. Stat. § 122C-53 through N.C. Gen. Stat. § 122C-56 may use and disclose such information as permitted or required under Title 45 of the Code of Federal Regulations, Part 164, Subpart E.

(c) Except as provided by N.C. Gen. Stat. § 122C-53 through N.C. Gen. Stat. § 122C-56, each client has the right that no confidential information acquired be disclosed by the facility.

(d) No provision of N.C. Gen. Stat. § 122C-205 and N.C. Gen. Stat. § 122C-53 through N.C. Gen. Stat. § 122C-56 permitting disclosure of confidential information may apply to the records of a client when federal statutes or regulations applicable to that client prohibit the disclosure of this information.

(e) Except as required or permitted by law, disclosure of confidential information to someone not authorized to receive the information is a Class 3 misdemeanor and is punishable only by a fine, not to exceed five hundred dollars ($500.00). (1955, c. 887, s. 12; 1963, c. 1166, s. 10; 1965, c. 800, s. 4; 1973, c. 47, s. 2; c. 476, s. 133; c. 673, s. 5; c. 1408, s. 2; 1979, c. 147; 1983, c. 383, s. 10; c. 491; c. 638, s. 22; c. 864, s. 4; 1985, c. 589, s. 2; 1985 (Reg. Sess., 1986), c. 863, s. 11; 1987, c. 749, s. 2; 1993, c. 539, s. 920; 1994, Ex. Sess., c. 24, s. 14(c); 2009-299, s. 5; 2011-314, s. 2(a).)