(a) No employee, agent or member of the commission or any member of the citizens' policy and complaint review council or member of the medical review board shall have access to health information relating to any identified person, including confidential HIV-related information on any person, except in connection with the following activities:

1. (1) investigation into the death of any inmate pursuant to article 3 of the Correction Law;
2. (2) investigation or evaluation of health care in any correctional facility;
3. (3) monitoring and providing technical assistance to any correctional facility or operator thereof;
4. (4) maintenance of statistical data as authorized by law;
5. (5) research studies approved by the commission;
6. (6) as necessary in the ordinary course of business to provide legal services to the commission; and
7. (7) as otherwise relevant and necessary to carry out the express statutory functions, powers and duties of the commission.

(c) Each employee of the State Commission of Correction who is given authorized access to the commission's records of an identified person that contain HIV-related information shall:

1. (1) be advised in writing that such person shall not:

   1. (i) examine documents containing HIV-related information unless required to do so in the course of his or her official duties;
   2. (ii) remove or copy any such documents unless he or she is acting within the scope of his or her assigned duties; or
   3. (iii) discuss the content of any such documents with any person unless that person is authorized to have access to such documents;
2. (2) sign a statement attesting that he or she has read the above restrictions and stating that he or she understands that violation may lead to disciplinary action, including suspension or dismissal from employment and that such violation may be against New York State law and lead to arrest and criminal prosecution.