(A) The Director shall maintain the confidentiality of lead test results and shall not disclose lead test results or other medical information which, because of name, identifying number, mark or description, can be readily associated with a particular individual or the individual’s parents/guardians, or any information that could be used in combination with other information to identify an individual, except to:

1. (1) the individual’s parents or guardians if a minor or to the individual if 18 years of age or older;
2. (2) the individual’s health care provider;
3. (3) anyone authorized in writing by that individual or the individual’s legal representative;
4. (4) authorized Department personnel or local health officials;
5. (5) authorized staff at another state health department if the individual is a resident of that state;
6. (6) anyone authorized to receive such information pursuant to a court order; or
7. (7) authorized staff from a Federal agency;
8. (8) any researcher approved by the Department to conduct a specific study pursuant to M.G.L.
9. c. 111, § 24A, and when approved by an Institutional Review Board.