(1) All records and specimens containing or accompanied by patient identifying information are confidential. The Washington state public health laboratories, other laboratories approved as public health referral laboratories, and any persons, institutions, or facilities submitting specimens or records containing patient-identifying information shall maintain the confidentiality of identifying information accompanying submitted laboratory specimens.

(2) Laboratory directors shall establish and implement policies and procedures to maintain confidentiality related to a patient's medical information.

(3) Laboratory directors and personnel working in laboratories who know of a person with a notifiable condition, other than a sexually transmitted disease, shall release identifying information only to other individuals responsible for protecting the health and well-being of the public through control of disease.

(4) Laboratory directors and personnel working in laboratories with knowledge of a person with sexually transmitted disease, and following the basic principles of health care providers, which respect the human dignity and confidentiality of patients:

(a) May disclose identity of a person or release identifying information only as specified in RCW 70.24.105; and

(b) Shall under RCW 70.24.105(6), use only the following customary methods for exchange of medical information:

(i) Laboratory directors and personnel working in laboratories may exchange medical information related to HIV testing, HIV test results, and confirmed HIV or confirmed STD diagnosis and treatment in order to provide health care services to the patient. This means that information shared impacts the care or treatment decisions concerning the patient; and the laboratory director or personnel working in the laboratory require the information for the patient's benefit.

(ii) Laboratory directors are authorized to permit access to a patient's medical information and medical record by laboratory staff or office staff to carry out duties required for care and treatment of a patient, the management of medical information, and the management of the patient's medical record.