A health care provider who with reasonable care relies upon an apparently genuine electronic health record accessed from a health information exchange to make a decision concerning the provision of health care to a patient is immune from civil or criminal liability for the decision if:

1.  The electronic health record is inaccurate;

2.  The inaccuracy was not caused by the health care provider;

3.  The inaccuracy resulted in an inappropriate health care decision; and

4.  The health care decision was appropriate based upon the information contained in the inaccurate electronic health record.