§ 7332.
(b)
(1)
The content of any record referred to in subsection (a) may be disclosed by the Secretary in accordance with the prior written consent of the patient or subject with respect to whom such record is maintained, but only to such extent, under such circumstances, and for such purposes as may be allowed in regulations prescribed by the Secretary.
(2)
Whether or not any patient or subject, with respect to whom any given record referred to in subsection (a) is maintained, gives written consent, the content of such record may be disclosed by the Secretary as follows:
(A)
To medical personnel to the extent necessary to meet a bona fide medical emergency.
(B)
To qualified personnel for the purpose of conducting scientific research, management audits, financial audits, or program evaluation, but such personnel may not identify, directly or indirectly, any individual patient or subject in any report of such research, audit, or evaluation, or otherwise disclose patient or subject identities in any manner.
(C)
(i)
In the case of any record which is maintained in connection with the performance of any program or activity relating to infection with the human immunodeficiency virus, to a Federal, State, or local public-health authority charged under Federal or State law with the protection of the public health, and to which Federal or State law requires disclosure of such record, if a qualified representative of such authority has made a written request that such record be provided as required pursuant to such law for a purpose authorized by such law.
(ii)
A person to whom a record is disclosed under this paragraph may not redisclose or use such record for a purpose other than that for which the disclosure was made.
(D)
If authorized by an appropriate order of a court of competent jurisdiction granted after application showing good cause therefor. In assessing good cause the court shall weigh the public interest and the need for disclosure against the injury to the patient or subject, to the physician-patient relationship, and to the treatment services. Upon the granting of such order, the court, in determining the extent to which any disclosure of all or any part of any record is necessary, shall impose appropriate safeguards against unauthorized disclosure.
(F)
(i)
To a representative of a patient who lacks decision-making capacity, when a practitioner deems the content of the given record necessary for that representative to make an informed decision regarding the patient’s treatment.
(ii)
In this subparagraph, the term “representative” means an individual, organization, or other body authorized under
section 7331 of this title and its implementing regulations to give informed consent on behalf of a patient who lacks decision-making capacity.
(G)
To a State controlled substance monitoring program, including a program approved by the Secretary of Health and Human Services under section 399O of the Public Health Service Act (
42 U.S.C. 280g–3), to the extent necessary to prevent misuse and diversion of prescription medicines.
(H)
(i)
To a non-Department entity (including private entities and other Federal agencies) for purposes of providing health care, including hospital care, medical services, and extended care services, to patients or performing other health care-related activities or functions.
(ii)
An entity to which a record is disclosed under this subparagraph may not disclose or use such record for a purpose other than that for which the disclosure was made or as permitted by law.
(I)
To a third party in order to recover or collect reasonable charges for care furnished to, or paid on behalf of, a patient in connection with a non-service connected disability as permitted by
section 1729 of this title or for a condition for which recovery is authorized or with respect to which the United States is deemed to be a third party beneficiary under the Act entitled “An Act to provide for the recovery from tortiously liable third persons of the cost of hospital and medical care and treatment furnished by the United States” (
[Public Law 87–693];
42 U.S.C. 2651 et seq.; commonly known as the “Federal Medical Care Recovery Act”).
(3)
In the event that the patient or subject who is the subject of any record referred to in subsection (a) is deceased, the content of any such record may be disclosed by the Secretary only upon the prior written request of the next of kin, executor, administrator, or other personal representative of such patient or subject and only if the Secretary determines that such disclosure is necessary for such survivor to obtain benefits to which such survivor may be entitled, including the pursuit of legal action, but then only to the extent, under such circumstances, and for such purposes as may be allowed in regulations prescribed pursuant to
section 7334 of this title.
(c)
Except as authorized by a court order granted under subsection (b)(2)(D), no record referred to in subsection (a) may be used to initiate or substantiate any criminal charges against, or to conduct any investigation of, a patient or subject.
(e)
The prohibitions of this section shall not prevent any interchange of records—
(1)
within and among those components of the Department furnishing health care to veterans, or determining eligibility for benefits under this title; or
(2)
between such components furnishing health care to veterans and the Armed Forces.
(Added [Pub. L. 94–581, title I, § 111(a)(1)], Oct. 21, 1976, [90 Stat. 2849], § 4132; amended [Pub. L. 100–322, title I, § 121], May 20, 1988, [102 Stat. 502]; renumbered § 7332 and amended [Pub. L. 102–40, title IV], §§ 401(a)(4)(A), 402(d)(1), 403(a)(1), (2), (4), (5), May 7, 1991, [105 Stat. 221], 239; [Pub. L. 109–461, title II, § 204(b)], Dec. 22, 2006, [120 Stat. 3411]; [Pub. L. 111–163, title V, § 504], May 5, 2010, [124 Stat. 1157]; [Pub. L. 112–74, div. H, title II, § 230(b)], Dec. 23, 2011, [125 Stat. 1159]; [Pub. L. 115–26, § 3], Apr. 19, 2017, [131 Stat. 130]; [Pub. L. 115–182, title I, § 132], June 6, 2018, [132 Stat. 1427].)