Responsibility of Plan

(a) Worker-specific injury information and provider-specific performance data are confidential and the Plan shall implement procedures to ensure that confidentiality. The procedures shall include: (1) Safeguards to protect against unauthorized disclosure; and (2) Provisions that any party making information available to the public is responsible for failure to comply with a standard of due care. (b) Information about the diagnosis, treatment or health of any injured worker shall be disclosed only to authorized persons. Release of information shall be permitted only with the written consent of the injured worker, or as needed for the Commissioner to enforce the Act and OAC 310:657. Nothing in OAC 310:657 shall prevent disclosure as otherwise required by law.