[§323C-36] Public health. (a) Any person or entity may disclose protected health information to a public health authority or other person authorized by law, for use in a legally authorized:

(1) Disease or injury report;

(2) Public health surveillance;

(3) Public health investigation or intervention; or

(4) Health or disease registry.

(b) The disclosure of protected health information, pursuant [to] this section, to a public health authority or other person authorized by law shall not be a violation of this part.

(c) Protected health information disclosed for purposes of this section remains protected health information and shall not be further disclosed by the receiving authority or person, except as permitted under this section. [L 1999, c 87, pt of §2]