§ 201-e. Maintenance of employee-patient records at occupational health service centers. No person charged with the custody and care of the health records of employees treated at an on-site employer sponsored occupational health service facility shall release or disclose any employee-patient record to an employer, except upon the express authorization of the employee-patient, or as otherwise authorized by law.