A person, institution or agency to whom such immunization information is furnished or to whom, access to records or information has been given, shall not divulge any part thereof so as to disclose the identity of such person to whom such information or record relates, except insofar as such disclosure is necessary for the best interests of the person or other persons, consistent with the purposes of this section.
Prevention, or its successor agency, when the commissioner has determined that the disclosure is in the best interests of the registrant or will contribute to the protection of public health and that the objective of the disclosure cannot be served by disclosure limited to de-identified information, or the federal health officials have committed in writing not to redisclose to or share registrant information with any other federal agency, including but not limited to the department of homeland security, immigration and customs enforcement, customs and border protection, or any successor agency, or any law enforcement agency; provided that either such commissioner may forgo the written commitment if requiring written commitment would result in the actual withholding of federal funds.
N.Y. Pub. Health Law § 2168