(A) Access to protected health information of persons who have participated in medical testing, treatment, vaccination, isolation, or quarantine programs or efforts by DHEC during a public health emergency is limited to those persons having a legitimate need to:

1. (1) provide treatment to the individual who is the subject of the health information;
2. (2) conduct epidemiological research; or
3. (3) investigate the causes of transmission.

(B) Protected health information held by DHEC must not be disclosed to others without individual specific informed authorization except for disclosures made:

1. (1) directly to the individual;
2. (2) to the individual's immediate family members or life partners;
3. (3) to appropriate state or federal agencies or authorities when necessary to protect public health;
4. (4) to health care personnel where needed to protect the health or life of the individual who is the subject of the information;
5. (5) pursuant to a court order or executive order of the Governor to avert a clear danger to an individual or the public health; or
6. (6) to coroners, medical examiners, or funeral directors or others dealing with human remains to identify a deceased individual or determine the manner or cause of death.