I recommend getting a signed authorization from the patient or a warrant or subpoena from the police. That way you're covered. I think there needs to be something to compel you to disclose the information since it doesn't really fall under "required by law". It would fall under "required by law" if you received a warrant or subpoena from the police
Chris Apgar, CISSP, C|CISO
CEO & President
(503) 384-2538 (o)
(503) 816-8555 (c)
(503) 384-2539 (f)
Privacy | Information Security | Compliance | Certification Readiness | Security Incident Response
The information contained in this email message is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately by email, and destroy the original message.