(A) Access to protected health information of persons who have participated in medical testing, treatment, vaccination, isolation, or quarantine programs or efforts by DHEC during a public health emergency is limited to those persons having a legitimate need to:

(1) provide treatment to the individual who is the subject of the health information;

(2) conduct epidemiological research; or

(3) investigate the causes of transmission.

(B) Protected health information held by DHEC must not be disclosed to others without individual specific informed authorization except for disclosures made:

(1) directly to the individual;

(2) to the individual’s immediate family members or life partners;

(3) to appropriate state or federal agencies or authorities when necessary to protect public health;

(4) to health care personnel where needed to protect the health or life of the individual who is the subject of the information;

(5) pursuant to a court order or executive order of the Governor to avert a clear danger to an individual or the public health; or

(6) to coroners, medical examiners, or funeral directors or others dealing with human remains to identify a deceased individual or determine the manner or cause of death.