A. Any use of individually identifiable health information pursuant to this section shall be limited to the minimum amount of information reasonably necessary to accomplish a public health purpose.

B. Individually identifiable health information received by the department shall not be public information and shall not be disclosed without the authorization of the individual who is the subject of the information, except as otherwise provided in state or federal law.

C. In accordance with state and federal law, the secretary shall adopt and promulgate rules to allow an individual to have access to, inspect and obtain copies of the individual’s individually identifiable health information.

D. Nothing in this section shall be construed to prevent an individual from disclosing that individual’s own individually identifiable health information.

E. As used in this section, “individually identifiable health information” means information related to the provision of health care or public health services to an individual that:

and (1)     is directly related to diseases or a condition of public health importance;

(2)     can be used to identify the individual recipient of health care or public health services.