(a) The department shall maintain a registry of persons who receive an immunization or antiviral administered to prepare for a potential disaster, public health disaster, terrorist attack, hostile military or paramilitary action, or extraordinary law enforcement emergency or in response to a declared disaster, public health disaster, terrorist attack, hostile military or paramilitary action, or extraordinary law enforcement emergency. A health care provider who administers an immunization or antiviral shall provide the data elements to the department. At the request and with the authorization of the health care provider, the data elements may be provided through a health information exchange as defined by § 182.151.
(b) The department shall maintain the registry as part of the immunization registry required by § 161.007.

(c) The department shall track adverse reactions to an immunization or antiviral administered to prepare for a potential disaster, public health disaster, terrorist attack, hostile military or paramilitary action, or extraordinary law enforcement emergency or in response to a declared disaster, public health disaster, terrorist attack, hostile military or paramilitary action, or extraordinary law enforcement emergency. A health care provider who administers an immunization or antiviral may provide data related to adverse reactions to the department.
(d) Sections 161.007, 161.0071, 161.0072, and 161.0074 apply to the data elements submitted to the department under this section, unless a provision in those sections conflicts with a requirement in this section.
(e) The executive commissioner by rule shall determine the period during which the information collected under this section must remain in the immunization registry following the end of the disaster, public health emergency, terrorist attack, hostile military or paramilitary action, or extraordinary law enforcement emergency.
(f) Unless an individual or the individual’s legally authorized representative consents in writing or electronically to continued inclusion of the individual’s information in the registry, the department shall remove the immunization records collected under this section from the registry on expiration of the period prescribed under Subsection (e).
(g) The immunization information of a child or other individual received by the department under this section, including individually identifiable information, may be released only:
(1) on consent of the individual or, if a child, the child’s parent, managing conservator, or guardian; or
(2) to a state agency or health care provider consistent with the purposes of this subchapter or the purposes of aiding or coordinating communicable disease prevention and control efforts during a declared disaster, public health emergency, terrorist attack, hostile military or paramilitary action, or extraordinary law enforcement emergency.
(h) The report required under § 161.0074 must also include the number of complaints received by the department related to the department’s failure to remove information from the registry as required by Subsection (f).
(i) The executive commissioner shall adopt rules necessary to implement this section.