641—1.17 (139A,22) Confidentiality.
	 1.17(1) A report or other information provided to or maintained by the department, a local board, or a local department which identifies a person infected with or exposed to a reportable or other disease or health condition is confidential and shall not be accessible to the public.
	 1.17(2) The identity of a business named in a report or investigation is confidential and shall not be accessible to the public. If information contained in a report or other information provided to or maintained by the department, a local board, or a local department concerns a business, information disclosing the identity of the business may be released to the public when the state public health medical director and epidemiologist or the director determines such a release of information necessary for the protection of the public.
	 1.17(3) Reportable disease records and information, with the exception of AIDS and HIV records, which identify a person or a business named in a report, may be disclosed under the following limited circumstances:
	  a.   	 By and between department employees and agents who have a need for the record in the performance of their duties.
	  b.   	 By and between department employees and agents and local boards of health and local health departments as necessary to conduct an investigation.
	  c.   	 By and between department employees and agents and health care providers, laboratories, and hospitals as necessary to conduct an investigation.
	  d.   	 By and between department employees and agents and employees and agents of federal, state, and local agencies as necessary to conduct an investigation.
	  e.   	 Reportable disease information may be included in a quarantine or isolation order or placard as necessary to prevent the spread of a quarantinable disease.
	  f.   	 Pursuant to rule 641—175.9(17A,22) or 641—175.10(17A,22).
[ARC 8231B, IAB 10/7/09, effective 11/11/09]