New York Codes, Rules and Regulations
Title 7 - DEPARTMENT OF CORRECTIONS AND COMMUNITY SUPERVISION
Chapter I - General Provisions
Part 7 - Aids Confidentiality
Section 7.5 - Confidentiality and disclosure
Current through Register Vol. 46, No. 12, March 20, 2024
(a) It is the policy of the department that whenever disclosure of confidential HIV-related information is warranted as defined in subdivision (b) of this section, such disclosure, whenever possible, should be made pursuant to the consent of the protected individual, and all reasonable steps, including appropriate counseling, should be taken to obtain consent. Once consent has been obtained, Form HS-2, or any other form approved by the Department of Health, is to be used as a release form for disclosure of confidential HIV-related information. Only Form HS-2, or other Department of Health approved form, is to be used for this purpose. A general medical release is not sufficient for the purpose of disclosing confidential HIV-related information.
(b) No person who obtains confidential HIV-related information in the course of his or her employment with the department or pursuant to a release of confidential HIV-related information may disclose or be compelled to disclose such information, except to the following:
(c) Confidential HIV-related information of a protected person may be disclosed to authorized employees or agents of a governmental agency pursuant to the regulations of the governmental agency when the person providing health or social services is regulated, supervised or monitored by the governmental agency or when the governmental agency administers the health program or a social service program and when such employees or agents have access to records in the ordinary course of business and when access is reasonably necessary for regulation, supervision, monitoring, administration or provision of services. Such authorized employees or agents may include attorneys authorized by a governmental agency when access occurs in the ordinary course of providing legal services and is reasonably necessary for supervision, monitoring, administration or provision of services. Such authorized employees or agents may also include public health officers as required for conducting epidemiological or surveillance investigations pursuant to the State Sanitary Code. Such surveillance or investigational data shall also be disclosed by the Public Health Officer to the State Department of Health as required by the State Sanitary Code.
(d) Confidential HIV-related information of a protected person may be disclosed to authorized employees or agents of a provider of health or social services when such provider is either regulated, supervised or monitored by a governmental agency or when a governmental agency administers the provider's health or social service program, and when such employees or agents have access to records in the ordinary course of business and when access is reasonably necessary for regulation, supervision, monitoring, administration or provision of services. Such authorized employees or agents may include attorneys authorized by persons providing health services when access occurs in the ordinary course of providing legal services and is reasonably necessary for supervision, monitoring, administration or provision of services.
(e) A physician may disclose confidential HIV-related information pertaining to a protected individual to a person, known to the physician, authorized pursuant to law to consent to the health care for a protected individual when the physician reasonably believes that:
A physician's decision to disclose pursuant to this paragraph, and the basis for that decision shall be recorded in the medical record.
(f) Written disclosure must be accompanied by a written statement prohibiting further disclosure. The statement shall include the following language or substantially similar language: "This information has been disclosed to you from confidential records which are protected by State law. State law prohibits you from making any further disclosures of this information without the specific written consent of the person to whom it pertains, or as otherwise permitted by law. Any unauthorized further disclosure in violation of State law may result in a fine or jail sentence or both. A general authorization for the release of medical or other information is not sufficient authorization for further disclosure." Form HS-3 is to be used for this purpose.
(g) If oral disclosures are necessary, they must be accompanied or followed as soon as possible, but no later than 10 days, by the statement required by subdivision (f) of this section.
(h) The statement required by subdivisions (f) and (g) of this section is not required for release to the protected person or to a person authorized by law to consent to health care for the individual when the protected individual lacks capacity, or for releases made by a physician or public health officer to a contact. For disclosures of confidential HIV-related information from the patient's medical record to persons who are permitted to access this information pursuant to paragraphs (b)(4)-(15) of this section and physicians or nurses or their authorized staff who are permitted to access this information pursuant to paragraph (b)(3) of this section, it shall be sufficient for the statement required by subdivisions (f) and (g) of this section to appear in the medical record itself.
(i) No person to whom confidential HIV-related information has been disclosed shall disclose the information to another person except as authorized by this Part, provided, however, that the provisions of this Part shall not apply to the protected individual or a natural person who is authorized pursuant to law to consent to health care for the protected individual.