A practitioner engaged in medical practice or research may not disclose the name or identity of a patient or research subject that the practitioner is required to keep confidential unless ordered by a court to disclose it within the context of a criminal investigation or proceeding.