A health care provider, health care facility, and their assistants, employees, agents, and contractors may not:
(1) Use or disclose health care information for marketing or fund-raising purposes, unless permitted by federal law; or
(2) Sell health care information to a third party, except:
(a) For purposes of treatment or payment;
(b) For purposes of sale, transfer, merger, or consolidation of a business;
(c) For purposes of remuneration to a third party for services;
(d) As disclosures are required by law;
(e) For purposes of providing access to or accounting of disclosures to an individual;
(f) For public health purposes;
(g) For research;
(h) With an individual's authorization;
(i) Where a reasonable cost-based fee is paid to prepare and transmit health information, where authority to disclose the information is provided in this chapter; or
(j) In a format that is deidentified and aggregated.
[ 2014 c 220 § 11; 2013 c 200 § 12.]
NOTES:
Effective date—2014 c 220: See note following RCW 70.02.290.
Effective date—2013 c 200: See note following RCW 70.02.010.