50-16-530. Disclosure without patient's authorization. A health care provider may disclose health care information about a patient without the patient's authorization if the disclosure is:

(1) directory information, unless the patient has instructed the health care provider not to make the disclosure;

(2) to federal, state, or local public health authorities, to the extent the health care provider is required by law to report health care information or when needed to protect the public health;

(3) to federal, state, or local law enforcement authorities to the extent required by law;

(4) to a law enforcement officer about the general physical condition of a patient being treated in a health care facility if the patient was injured on a public roadway or was injured by the possible criminal act of another;

(5) in response to a request of the office of victims services for information under 53-9-104(2)(b);

(6) pursuant to compulsory process in accordance with 50-16-535 and 50-16-536;

(7) pursuant to 50-16-712; or

(8) to the state medical examiner or a county coroner for use in determining cause of death. The information is required to be held confidential as provided by law.