(1) In addition to the disclosures authorized by RCW
70.02.050 and
70.02.210, a health care provider or health care facility may disclose health care information, except for information and records related to sexually transmitted diseases and information related to mental health services which are addressed by RCW
70.02.220 through
70.02.260, about a patient without the patient's authorization, to:
(a) Any other health care provider or health care facility reasonably believed to have previously provided health care to the patient, to the extent necessary to provide health care to the patient, unless the patient has instructed the health care provider or health care facility in writing not to make the disclosure;
(c) A health care provider or health care facility who is the successor in interest to the health care provider or health care facility maintaining the health care information;
(d) A person who obtains information for purposes of an audit, if that person agrees in writing to:
(i) Remove or destroy, at the earliest opportunity consistent with the purpose of the audit, information that would enable the patient to be identified; and
(ii) Not to disclose the information further, except to accomplish the audit or report unlawful or improper conduct involving fraud in payment for health care by a health care provider or patient, or other unlawful conduct by the health care provider;
(e) Provide directory information, unless the patient has instructed the health care provider or health care facility not to make the disclosure;
(f) Fire, police, sheriff, or other public authority, that brought, or caused to be brought, the patient to the health care facility or health care provider if the disclosure is limited to the patient's name, residence, sex, age, occupation, condition, diagnosis, estimated or actual discharge date, or extent and location of injuries as determined by a physician, and whether the patient was conscious when admitted;
(g) Federal, state, or local law enforcement authorities and the health care provider, health care facility, or third-party payor believes in good faith that the health care information disclosed constitutes evidence of criminal conduct that occurred on the premises of the health care provider, health care facility, or third-party payor;
(h) Another health care provider, health care facility, or third-party payor for the health care operations of the health care provider, health care facility, or third-party payor that receives the information, if each entity has or had a relationship with the patient who is the subject of the health care information being requested, the health care information pertains to such relationship, and the disclosure is for the purposes described in *RCW
70.02.010(17) (a) and (b);
(i) An official of a penal or other custodial institution in which the patient is detained; and
(j) Any law enforcement officer, corrections officer, or guard supplied by a law enforcement or corrections agency who is accompanying a patient pursuant to RCW
10.110.020, only to the extent the disclosure is incidental to the fulfillment of the role of the law enforcement officer, corrections officer, or guard under RCW
10.110.020.
(2) In addition to the disclosures required by RCW
70.02.050 and
70.02.210, a health care provider shall disclose health care information, except for information related to sexually transmitted diseases and information related to mental health services which are addressed by RCW
70.02.220 through
70.02.260, about a patient without the patient's authorization if the disclosure is:
(a) To federal, state, or local law enforcement authorities to the extent the health care provider is required by law;
(b) To federal, state, or local law enforcement authorities, upon receipt of a written or oral request made to a nursing supervisor, administrator, or designated privacy official, in a case in which the patient is being treated or has been treated for a bullet wound, gunshot wound, powder burn, or other injury arising from or caused by the discharge of a firearm, or an injury caused by a knife, an ice pick, or any other sharp or pointed instrument which federal, state, or local law enforcement authorities reasonably believe to have been intentionally inflicted upon a person, or a blunt force injury that federal, state, or local law enforcement authorities reasonably believe resulted from a criminal act, the following information, if known:
(i) The name of the patient;
(ii) The patient's residence;
(iii) The patient's sex;
(iv) The patient's age;
(v) The patient's condition;
(vi) The patient's diagnosis, or extent and location of injuries as determined by a health care provider;
(vii) Whether the patient was conscious when admitted;
(viii) The name of the health care provider making the determination in (b)(v), (vi), and (vii) of this subsection;
(ix) Whether the patient has been transferred to another facility; and
(x) The patient's discharge time and date;
(c) Pursuant to compulsory process in accordance with RCW
70.02.060.
(3) To the extent they retain health care information subject to this chapter, the department of social and health services and the health care authority shall disclose to the department of children, youth, and families health care information, except for information and records related to sexually transmitted diseases and information related to mental health services that are addressed by RCW
70.02.220 through
70.02.260, about a patient without the patient's authorization, for the purpose of investigating and preventing child abuse and neglect and providing for the health care coordination and the well-being of children in foster care. Disclosure under this subsection is mandatory for the purposes of the federal health insurance portability and accountability act.