(a) The first time the department receives registry data for an individual for whom the department has received consent to be included in the registry, the department shall send notice to the individual or the individual’s legally authorized representative disclosing:
(1) that providers and payors may be sending the individual’s immunization information to the department;
(2) the information that is included in the registry;
(3) the persons to whom the information may be released under Sections 161.00735(b) and 161.008(d);
(4) the purpose and use of the registry;
(5) the procedure to exclude an individual from the registry; and
(6) the procedure to report a violation if an individual’s information is included in the registry after exclusion has been requested or consent has been withdrawn.
(b) On discovering that consent to be included in the registry has not been granted or has been withdrawn, the department shall exclude the individual’s immunization records from the registry and any other registry-related department record that individually identifies the individual.

(c) On receipt of a written or electronic request to exclude an individual’s immunization records from the registry, the department shall send to the individual or the individual’s legally authorized representative who makes the request a written confirmation of receipt of the request for exclusion and shall exclude the individual’s records from the registry.
(d) The department commits a violation if the department fails to exclude an individual’s immunization information from the registry as required by Subsection (b) or (c).
(e) The department shall accept a written or electronic statement from an individual or the individual’s legally authorized representative communicating to the department that an individual’s information should be excluded from the registry, including a statement on a minor’s birth certificate, as a request for exclusion under Subsection (c).