Iowa Code § 139A.3A
When the department receives a report under this chapter or acts on other reliable information that a person is infected with a disease, illness, or health condition that may be a potential cause of a public health disaster, the department shall identify all individuals reasonably believed to have been exposed to the disease, illness, or health condition and shall investigate all such cases for sources of infection and ensure that such cases are subject to proper control measures. Any hospital, health care provider, or other person may provide information, interviews, reports, statements, memoranda, records, or other data related to the condition and treatment of any individual, if not otherwise prohibited by the federal Health Insurance Portability and Accountability Act of 1996, Pub. L. No. 104-191, to the department to be used for the limited purpose of determining whether a public health disaster exists.
Iowa Code § 139A.3A