(1) A health care provider or health care facility may disclose health care information, except for information and records related to sexually transmitted diseases which are addressed in RCW
70.02.220, about a patient without the patient's authorization to the extent a recipient needs to know the information, if the disclosure is:
(a) To a person who the provider or facility reasonably believes is providing health care to the patient;
(b) To any other person who requires health care information for health care education, or to provide planning, quality assurance, peer review, or administrative, legal, financial, actuarial services to, or other health care operations for or on behalf of the health care provider or health care facility; or for assisting the health care provider or health care facility in the delivery of health care and the health care provider or health care facility reasonably believes that the person:
(i) Will not use or disclose the health care information for any other purpose; and
(ii) Will take appropriate steps to protect the health care information;
(c) To any person if the health care provider or health care facility believes, in good faith, that use or disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, and the information is disclosed only to a person or persons reasonably able to prevent or lessen the threat, including the target of the threat. There is no obligation under this chapter on the part of the provider or facility to so disclose; or
(d) For payment, including information necessary for a recipient to make a claim, or for a claim to be made on behalf of a recipient for aid, insurance, or medical assistance to which he or she may be entitled.
(2) A health care provider shall disclose health care information, except for information and records related to sexually transmitted diseases, unless otherwise authorized in RCW
70.02.220, about a patient without the patient's authorization if the disclosure is:
(a) To federal, state, or local public health authorities, to the extent the health care provider is required by law to report health care information; when needed to determine compliance with state or federal licensure, certification or registration rules or laws, or to investigate unprofessional conduct or ability to practice with reasonable skill and safety under chapter
18.130 RCW. Any health care information obtained under this subsection is exempt from public inspection and copying pursuant to chapter
42.56 RCW; or
(b) When needed to protect the public health.