Va. Code Ann. § 32.1-127.1:04
B. The Departments of Health, Medical Assistance Services, Behavioral Health and Developmental Services, and Social Services, and the Departments for Aging and Rehabilitative Services, the Blind and Vision Impaired, and the Deaf and Hard-of-Hearing, or any successors in interest thereof shall establish a secure system for sharing protected health information that may be necessary for the coordination of prevention and control of disease, injury, or disability and for the delivery of health care benefits when such protected information concerns individuals who (i) have contracted a reportable disease, including exposure to a toxic substance, as required by the Board of Health pursuant to § 32.1-35 or other disease or disability required to be reported by law; (ii) are the subjects of public health surveillance, public health investigations, or public health interventions or are applicants for or recipients of medical assistance services; (iii) have been or are the victims of child abuse or neglect or domestic violence; or (iv) may present a serious threat to health or safety of a person or the public or may be subject to a serious threat to their health or safety. For the purposes of this section, "public health interventions" shall include the services provided through the Departments for Aging and Rehabilitative Services, the Blind and Vision Impaired, and the Deaf and Hard-of-Hearing, or any successors in interest thereof.
Pursuant to the regulations concerning patient privacy promulgated by the federal Department of Health and Human Services, covered entities may disclose protected health information to the secure system without obtaining consent or authorization for such disclosure. Such protected health information shall be used exclusively for the purposes established in this section.
2002, c. 835; 2003, c. 464; 2009, cc. 813, 840; 2012, cc. 803, 835.