A. The Commissioner and all other persons to whom data is submitted shall keep patient information confidential. Mechanisms for protecting patient data shall be developed and continually evaluated to ascertain their effectiveness. No publication of information, research or medical data shall be made which identifies the patients by names or addresses, except as specified in subsection B. The Commissioner or his designees may utilize institutional data in order to improve the quality of and appropriate access to emergency medical services and to improve the health of citizens of the Commonwealth.
B. In accordance with the State Board of Health’s regulations and applicable federal law and regulations, the Commissioner may disclose information, research, or medical data that identifies patients by name or address if the Commissioner determines that such disclosure is necessary to develop and implement programs that improve the quality of patient care, improve access to medical services, or make other system improvements. The Commissioner shall only disclose such information with entities, including but not limited to other Virginia state agencies and programs, federal agencies and programs, the National Registry of Emergency Medical Technicians, or recognized research institutions and organizations, that seek to improve quality of care, improve access to medical services, or make other system improvements.
C. No individual, licensed emergency medical services agency, hospital, Regional Emergency Medical Services Council or organization advising the Commissioner shall be liable for any civil damages resulting from any act or omission preformed as required by this article unless such act or omission was the result of gross negligence or willful misconduct.