Section 3701.17. Protected health information

(A) As used in this section:

(1) "Prosecutor" has the same meaning as in section 2935.01 of the Revised Code.

(2) "Protected health information" means information, in any form, including oral, written, electronic, visual, pictorial, or physical that describes an individual's past, present, or future physical or mental health status or condition, receipt of treatment or care, or purchase of health products, if either of the following applies:

(a) The information reveals the identity of the individual who is the subject of the information.

(b) The information could be used to reveal the identity of the individual who is the subject of the information, either by using the information alone or with other information that is available to predictable recipients of the information.

(B) Protected health information reported to or obtained by the director of health, the department of health, or a board of health of a city or general health district is confidential and shall not be released without the written consent of the individual who is the subject of the information unless the information is released pursuant to division (C) of this section or one of the following applies:

(1) The release of the information is necessary to provide treatment to the individual and the information is released pursuant to a written agreement that requires the recipient of the information to comply with the confidentiality requirements established under this section.

(2) The release of the information is necessary to ensure the accuracy of the information and the information is released pursuant to a written agreement that requires the recipient of the information to comply with the confidentiality requirements established under this section.

(3) The information is released pursuant to a search warrant or subpoena issued by or at the request of a grand jury or prosecutor in connection with a criminal investigation or prosecution.

(4) The director determines the release of the information is necessary, based on an evaluation of relevant information, to avert or mitigate a clear threat to an individual or to the public health. Information may be released pursuant to this division only to those persons or entities necessary to control, prevent, or mitigate disease.

(C) Information that does not identify an individual is not protected health information and may be released in summary, statistical, or aggregate form. Information that is in a summary, statistical, or aggregate form and that does not identify an individual is a public record under section 149.43 of the Revised Code and, upon request, shall be released by the director.

(D) Except for information released pursuant to division (B)(4) of this section, any disclosure pursuant to this section shall be in writing and accompanied by a written statement that includes the following or substantially similar language: "This information has been disclosed to you from confidential records protected from disclosure by state law. If this information has been released to you in other than a summary, statistical, or aggregate form, you shall make no further disclosure of this information without the specific, written, and informed release of the individual to whom it pertains, or as otherwise permitted by state law. A general authorization for the release of medical or other information is not sufficient for the release of information pursuant to this section."

Effective Date: 02-12-2004