(a) Notwithstanding Sections 81.046, 82.009, 161.0073, and 161.008, a health information exchange may access and transmit health-related information under Sections 81.044(a), 82.008(a), 161.007(d), 161.00705(a), 161.00706(b), and 161.008(i) if the access or transmittal is:
(1) made for the purpose of assisting in the reporting of health-related information to the appropriate agency;
(2) requested and authorized by the appropriate health care provider, practitioner, physician, facility, clinical laboratory, or other person who is required to report health-related information;
(3) made in accordance with the applicable consent requirements for the immunization registry under Subchapter A, Chapter 161, if the information being accessed or transmitted relates to the immunization registry; and
(4) made in accordance with the requirements of this subchapter and all other state and federal law.
(b) A health information exchange may only use and disclose the information that it accesses or transmits under Subsection (a) in compliance with this subchapter and all applicable state and federal law, and may not exchange, sell, trade, or otherwise make any prohibited use or disclosure of the information.