(2) Require the disclosure of protected health information to a lay caregiver without obtaining a patient's consent as required by state and federal laws governing health information privacy and security, including chapter
70.02 RCW and the federal health insurance portability and accountability act of 1996 and related regulations.