(a) The following data received by the Department of State Health Services (department) from a hospital is confidential under authority of the Health and Safety Code, Chapters 104 and 311:
  (1) information relating to a specific patient; and
  (2) financial information relating to a provider or hospital that was submitted prior to September 1, 1987. All financial data regarding a provider or facility submitted after September 1, 1987, are no longer confidential.
(b) The department will establish appropriate internal controls to maintain confidentiality of patient level data.
(c) The department will disclose confidential patient information to a third party only upon receipt of appropriate written consent of the patient.

Source Note: The provisions of this §13.19 adopted to be effective February 23, 1994, 19 TexReg 921; amended to be effective May 10, 1998, 23 TexReg 4269; amended to be effective February 8, 2001, 26 TexReg 1141; amended to be effective December 4, 2007, 32 TexReg 8827