No employee or agent of the Department who has knowledge of personal health-related information in the course of employment, shall disclose such information to any other person unless such person is officially authorized access to the information and requires the information to perform an officially designated function.
N.Y. Comp. Codes R. & Regs. Tit. 10 §§ 50-4.4