Ohio Code § 3701.17

§ 3701.17.

(A) As used in this section: (1) “Prosecutor” has the same meaning as in section 2935.01 of the Revised Code . (2) “ Protected health information ” means information, in any form, including oral, written, electronic, visual, pictorial,

or physical that describes an individual's past, present, or future physical or mental

health status or condition, receipt of treatment or care, or purchase of health products,

if either of the following applies: (a) The information reveals the identity of the individual who is the subject of the

information. (b) The information could be used to reveal the identity of the individual who is the

subject of the information, either by using the information alone or with other information

that is available to predictable recipients of the information. (B) Protected health information reported to or obtained by the director of health, the

department of health, or a board of health of a city or general health district is

confidential and shall not be released without the written consent of the individual

who is the subject of the information unless the information is released pursuant

to division (C) of this section or one of the following applies: (1) The release of the information is necessary to provide treatment to the individual

and the information is released pursuant to a written agreement that requires the

recipient of the information to comply with the confidentiality requirements established

under this section. (2) The release of the information is necessary to ensure the accuracy of the information

and the information is released pursuant to a written agreement that requires the

recipient of the information to comply with the confidentiality requirements established

under this section. (3) The information is released pursuant to a search warrant or subpoena issued by or

at the request of a grand jury or prosecutor in connection with a criminal investigation

or prosecution. (4) The director determines the release of the information is necessary, based on an

evaluation of relevant information, to avert or mitigate a clear threat to an individual

or to the public health.  Information may be released pursuant to this division only to those persons or entities

necessary to control, prevent, or mitigate disease. (C) Information that does not identify an individual is not protected health information

and may be released in summary, statistical, or aggregate form.  Information that is in a summary, statistical, or aggregate form and that does not

identify an individual is a public record under section 149.43 of the Revised Code and, upon request, shall be released by the director. (D) Except for information released pursuant to division (B)(4) of this section, any

disclosure pursuant to this section shall be in writing and accompanied by a written

statement that includes the following or substantially similar language:  “This information

has been disclosed to you from confidential records protected from disclosure by state

law.  If this information has been released to you in other than a summary, statistical,

or aggregate form, you shall make no further disclosure of this information without

the specific, written, and informed release of the individual to whom it pertains,

or as otherwise permitted by state law.  A general authorization for the release of medical or other information is not sufficient

for the release of information pursuant to this section.”