(a) A valid authorization to disclose nonpublic personal health information pursuant to this Article V shall be in written or electronic form and shall contain all of the following:
(b) An authorization for the purposes of this Article V shall specify a length of time for which the authorization shall remain valid, which in no event shall be for more than twenty-four (24) months.
(c) A consumer or customer who is the subject of nonpublic personal health information may revoke an authorization provided pursuant to this Article V at any time, subject to the rights of an individual who acted in reliance on the authorization prior to notice of the revocation.
(d) A licensee shall retain the authorization or a copy thereof in the record of the individual who is the subject of nonpublic personal health information.
044-54 Wyo. Code R. § 18