(1) CONFIDENTIALITY. All patient health care records shall remain confidential. Patient health care records may be released only to the persons designated in this section or to other persons with the informed consent of the patient or of a person authorized by the patient. This subsection does not prohibit reports made in compliance with s. 253.12 (2), 255.40, or 979.01; records generated and disclosed to the controlled substances board pursuant to s. 961.385; testimony authorized under s. 905.04 (4) (h); or releases made for purposes of health care operations, as defined in 45 CFR 164.501, and as authorized under 45 CFR 164, subpart E.(2) ACCESS WITHOUT INFORMED CONSENT.(a) Notwithstanding sub. (1), patient health care records shall be released upon request without informed consent in the following circumstances: 1. To health care facility staff committees, or accreditation or health care services review organizations for the purposes of conducting management audits, financial audits, program monitoring and evaluation, health care services reviews or accreditation.2. To the extent that performance of their duties requires access to the records, to a health care provider or any person acting under the supervision of a health care provider or to a person licensed under s. 256.15, including medical staff members, employees or persons serving in training programs or participating in volunteer programs and affiliated with the health care provider, if any of the following is applicable: a. The person is rendering assistance to the patient.b. The person is being consulted regarding the health of the patient.c. The life or health of the patient appears to be in danger and the information contained in the patient health care records may aid the person in rendering assistance.d. The person prepares or stores records, for the purposes of the preparation or storage of those records.3. To the extent that the records are needed for billing, collection or payment of claims.4. Under a lawful order of a court of record.5. In response to a written request by any federal or state governmental agency to perform a legally authorized function, including but not limited to management audits, financial audits, program monitoring and evaluation, facility licensure or certification or individual licensure or certification. The private pay patient, except if a resident of a nursing home, may deny access granted under this subdivision by annually submitting to a health care provider, other than a nursing home, a signed, written request on a form provided by the department. The provider, if a hospital, shall submit a copy of the signed form to the patient's physician.6. For purposes of research if the researcher is affiliated with the health care provider and provides written assurances to the custodian of the patient health care records that the information will be used only for the purposes for which it is provided to the researcher, the information will not be released to a person not connected with the study, and the final product of the research will not reveal information that may serve to identify the patient whose records are being released under this paragraph without the informed consent of the patient. The private pay patient may deny access granted under this subdivision by annually submitting to the health care provider a signed, written request on a form provided by the department.7. To an elder-adult-at-risk agency designated under s. 46.90 (2) or other investigating agency under s. 46.90 for purposes of s. 46.90 (4) and (5) or to an adult-at-risk agency designated under s. 55.043 (1d) for purposes of s. 55.043. The health care provider may release information by initiating contact with the elder-adult-at-risk agency or adult-at-risk agency without receiving a request for release of the information from the elder-adult-at-risk agency or adult-at-risk agency.8. To the department under s. 255.04 and to the persons specified under s. 255.04 (3). The release of a patient health care record under this subdivision shall be limited to the information prescribed by the department under s. 255.04 (2).9.a. In this subdivision, "abuse" has the meaning given in s. 51.62 (1) (ag); "neglect" has the meaning given in s. 51.62 (1) (br); and "parent" has the meaning given in s. 48.02 (13), except that "parent" does not include the parent of a minor whose custody is transferred to a legal custodian, as defined in s. 48.02 (11), or for whom a guardian is appointed under s. 48.9795 or 54.10 or s. 880.33, 2003 stats.b. Except as provided in subd. 9. c. and d., to staff members of the protection and advocacy agency designated under s. 51.62 (2) or to staff members of the private, nonprofit corporation with which the agency has contracted under s. 51.62 (3) (a) 3, if any, for the purpose of protecting and advocating the rights of a person with developmental disabilities, as defined under s. 51.62 (1) (am), who resides in or who is receiving services from an inpatient health care facility, as defined under s. 51.62 (1) (b), or a person with mental illness, as defined under s. 51.62 (1) (bm).c. If the patient, regardless of age, has a guardian appointed under s. 48.9795 or 54.10 or s. 880.33, 2003 stats., or if the patient is a minor with developmental disability, as defined in s. 51.01 (5) (a), who has a parent or has a guardian appointed under s. 48.831 and does not have a guardian appointed under s. 48.9795 or 54.10 or s. 880.33, 2003 stats., information concerning the patient that is obtainable by staff members of the agency or nonprofit corporation with which the agency has contracted is limited, except as provided in subd. 9. e., to the nature of an alleged rights violation, if any; the name, birth date and county of residence of the patient; information regarding whether the patient was voluntarily admitted, involuntarily committed or protectively placed and the date and place of admission, placement or commitment; and the name, address and telephone number of the guardian of the patient and the date and place of the guardian's appointment or, if the patient is a minor with developmental disability who has a parent or has a guardian appointed under s. 48.831 and does not have a guardian appointed under s. 48.9795 or 54.10 or s. 880.33, 2003 stats., the name, address and telephone number of the parent or guardian appointed under s. 48.831 of the patient.d. Except as provided in subd. 9. e., any staff member who wishes to obtain additional information about a patient described in subd. 9. c. shall notify the patient's guardian or, if applicable, parent in writing of the request and of the guardian's or parent's right to object. The staff member shall send the notice by mail to the guardian's or, if applicable, parent's address. If the guardian or parent does not object in writing within 15 days after the notice is mailed, the staff member may obtain the additional information. If the guardian or parent objects in writing within 15 days after the notice is mailed, the staff member may not obtain the additional information.e. The restrictions on information that is obtainable by staff members of the protection and advocacy agency or private, nonprofit corporation that are specified in subd. 9. c. and d. do not apply if the custodian of the record fails to promptly provide the name and address of the parent or guardian; if a complaint is received by the agency or nonprofit corporation about a patient, or if the agency or nonprofit corporation determines that there is probable cause to believe that the health or safety of the patient is in serious and immediate jeopardy, the agency or nonprofit corporation has made a good-faith effort to contact the parent or guardian upon receiving the name and address of the parent or guardian, the agency or nonprofit corporation has either been unable to contact the parent or guardian or has offered assistance to the parent or guardian to resolve the situation and the parent or guardian has failed or refused to act on behalf of the patient; if a complaint is received by the agency or nonprofit corporation about a patient or there is otherwise probable cause to believe that the patient has been subject to abuse or neglect by a parent or guardian; or if the patient is a minor whose custody has been transferred to a legal custodian, as defined in s. 48.02 (11) or for whom a guardian that is an agency of the state or a county has been appointed.10. To persons as provided under s. 655.17 (7) (b), as created by 1985 Wisconsin Act 29, if the patient files a submission of controversy under s. 655.04 (1), 1983 stats., on or after July 20, 1985 and before June 14, 1986, for the purposes of s. 655.17 (7) (b), as created by 1985 Wisconsin Act 29.11. To an agency, as defined in s. 48.981 (1) (ag), a sheriff or police department, or a district attorney for purposes of investigation of threatened or suspected child abuse or neglect or suspected unborn child abuse or for purposes of prosecution of alleged child abuse or neglect, if the person conducting the investigation or prosecution identifies the subject of the record by name. The health care provider may release information by initiating contact with an agency, sheriff or police department, or district attorney without receiving a request for release of the information. A person to whom a report or record is disclosed under this subdivision may not further disclose the report or record, except to the persons, for the purposes, and under the conditions specified in s. 48.981 (7).11m. To a court conducting a termination of parental rights proceeding under s. 48.42, to an agency, district attorney, corporation counsel or other appropriate official under s. 48.09 performing official duties relating to such a proceeding, or to the attorney or guardian ad litem for any party to such a proceeding for purposes of conducting, preparing for, or performing official duties relating to the proceeding, if that person identifies the subject of the record by name. A person to whom a report or record is disclosed under this subdivision may not further disclose the report or record, except for the purposes specified in this subdivision.12. To a school district employee or agent, with regard to patient health care records maintained by the school district by which he or she is employed or is an agent, if any of the following apply: a. The employee or agent has responsibility for preparation or storage of patient health care records.b. Access to the patient health care records is necessary to comply with a requirement in federal or state law.13. To persons and entities under s. 940.22.14. To a representative of the board on aging and long-term care, in accordance with s. 49.498 (5) (e).15. To the department under s. 48.60 (5) (c), 50.02 (5) or 51.03 (2) or to a sheriff, police department or district attorney for purposes of investigation of a death reported under s. 48.60 (5) (a), 50.035 (5) (b), 50.04 (2t) (b) or 51.64 (2).16. To a designated representative of the long-term care ombudsman under s. 16.009 (4), for the purpose of protecting and advocating the rights of an individual 60 years of age or older who resides in a long-term care facility, as specified in s. 16.009 (4) (b), or an individual 60 years of age or older who is an enrollee of the family care program, the Family Care Partnership Program, the program of all-inclusive care for the elderly, or the self-directed services option.17. To the department under s. 50.53 (2).18. Following the death of a patient, to a coroner, deputy coroner, medical examiner or medical examiner's assistant, for the purpose of completing a medical certificate under s. 69.18 (2) or investigating a death under s. 979.01 or 979.10. The health care provider may release information by initiating contact with the office of the coroner or medical examiner without receiving a request for release of the information and shall release information upon receipt of an oral or written request for the information from the coroner, deputy coroner, medical examiner or medical examiner's assistant. The recipient of any information under this subdivision shall keep the information confidential except as necessary to comply with s. 69.18, 979.01 or 979.10.18m. If the subject of the patient health care records is a child or juvenile who has been placed in a foster home, group home, residential care center for children and youth, or juvenile correctional facility or in a supervised independent living arrangement, including a placement under s. 48.205, 48.21, 938.205, or 938.21, or for whom placement in a foster home, group home, residential care center for children and youth, or juvenile correctional facility or in a supervised independent living arrangement is recommended under s. 48.33 (4), 48.425 (1) (g), 48.837 (4) (c), or 938.33 (3) or (4), to an agency directed by a court to prepare a court report under s. 48.33 (1), 48.424 (4) (b), 48.425 (3), 48.831 (2), 48.837 (4) (c), or 938.33 (1), to an agency responsible for preparing a court report under s. 48.365 (2g), 48.425 (1), 48.831 (2), 48.837 (4) (c), or 938.365 (2g), to an agency responsible for preparing a permanency plan under s. 48.355 (2e), 48.38, 48.43 (1) (c) or (5) (c), 48.63 (4) or (5) (c), 48.831 (4) (e), 938.355 (2e), or 938.38 regarding the child or juvenile, to the foster parent of the child or juvenile or the operator of the group home, residential care center for children and youth, or juvenile correctional facility in which the child or juvenile is placed, or to an agency that placed the child or juvenile or arranged for the placement of the child or juvenile in any of those placements and, by any of those agencies, to any other of those agencies and, by the agency that placed the child or juvenile or arranged for the placement of the child or juvenile in any of those placements, to the foster parent of the child or juvenile or the operator of the group home, residential care center for children and youth, or juvenile correctional facility in which the child or juvenile is placed, as provided in s. 48.371 or 938.371.19. To a procurement organization, as defined in s. 157.06 (2) (p), for the purpose of conducting an examination to ensure the medical suitability of a body part that is or could be the subject of an anatomical gift under s. 157.06.20. If the patient health care records do not contain information and the circumstances of the release do not provide information that would permit the identification of the patient.21. To a prisoner's health care provider, the medical staff of a prison or jail in which a prisoner is confined, the receiving institution intake staff at a prison or jail to which a prisoner is being transferred or a person designated by a jailer to maintain prisoner medical records, if the disclosure is made with respect to a prisoner's patient health care records under s. 302.388 or to the department of corrections if the disclosure is made with respect to a prisoner's patient health care records under s. 302.388 (4).22. By a person specified in subd. 21. to a correctional officer of the department of corrections who has custody of or is responsible for the supervision of a prisoner, to a person designated by a jailer to have custodial authority over a prisoner, or to a law enforcement officer or other person who is responsible for transferring a prisoner to or from a prison or jail, if the patient health care record indicates that the prisoner has a communicable disease and disclosure of that information is necessary for the health and safety of the prisoner or of other prisoners, of the person whom the information is disclosed, or of any employee of the prison or jail.(c) Notwithstanding sub. (1), patient health care records shall be released to appropriate examiners and facilities in accordance with s. 971.17 (2) (e), (4) (c), and (7) (c). The recipient of any information from the records shall keep the information confidential except as necessary to comply with s. 971.17.(cm) Notwithstanding sub. (1), patient health care records shall be released, upon request, to appropriate persons in accordance with s. 980.031 (4) and to authorized representatives of the department of corrections, the department of health services, the department of justice, or a district attorney for use in the prosecution of any proceeding or any evaluation conducted under ch. 980, if the treatment records involve or relate to an individual who is the subject of the proceeding or evaluation. The court in which the proceeding under ch. 980 is pending may issue any protective orders that it determines are appropriate concerning records made available or disclosed under this paragraph. Any representative of the department of corrections, the department of health services, the department of justice, or a district attorney may disclose information obtained under this paragraph for any purpose consistent with any proceeding under ch. 980.(3) REPORTS MADE WITHOUT INFORMED CONSENT. (a) Notwithstanding sub. (1), a physician, a naturopathic doctor, a limited-scope naturopathic doctor, a physician assistant, or an advanced practice nurse prescriber certified under s. 441.16 (2) who treats a patient whose physical or mental condition in the physician's, naturopathic doctor's, limited-scope naturopathic doctor's, physician assistant's, or advanced practice nurse prescriber's judgment affects the patient's ability to exercise reasonable and ordinary control over a motor vehicle may report the patient's name and other information relevant to the condition to the department of transportation without the informed consent of the patient.(b) Notwithstanding sub. (1), an optometrist who examines a patient whose vision in the optometrist's judgment affects the patient's ability to exercise reasonable and ordinary control over a motor vehicle may report the patient's name and other information relevant to the condition to the department of transportation without the informed consent of the patient.(4) RELEASE OF A PORTION OF A RECORD TO CERTAIN PERSONS.(a) In this subsection: 1. "Immediate family" has the meaning given in s. 350.01 (8m).2. "Incapacitated" has the meaning given in s. 50.94 (1) (b).(b) Notwithstanding sub. (1), a health care provider may release a portion, but not a copy, of a patient health care record, to the following, under the following circumstances: 1. Any person, if the patient or a person authorized by the patient is not incapacitated, is physically available, and agrees to the release of that portion.2. Any of the following, as applicable, if the patient and person authorized by the patient are incapacitated or are not physically available, or if an emergency makes it impracticable to obtain an agreement from the patient or from the person authorized by the patient, and if the health care provider determines, in the exercise of his or her professional judgment, that release of a portion of the patient health care record is in the best interest of the patient:a. A member of the patient's immediate family, another relative of the patient, a close personal friend of the patient, or an individual identified by the patient, that portion that is directly relevant to the involvement by the member, relative, friend, or individual in the patient's care.b. Any person, that portion that is necessary to identify, locate, or notify a member of the patient's immediate family or another person that is responsible for the care of the patient concerning the patient's location, general condition, or death.3. A victim advocate, as defined in s. 50.378 (1) (a), who is accompanying a victim of sexual assault, human trafficking, or child sexual abuse under s. 50.378 (2).(5) REDISCLOSURE. (a) In this subsection, "covered entity" has the meaning given in 45 CFR 160.103.(b) Notwithstanding sub. (1) and except as provided in s. 610.70 (5), a covered entity may redisclose a patient health care record it receives under this section without consent by the patient or person authorized by the patient if the redisclosure of the patient health care record is a release permitted under this section.(c) Notwithstanding sub. (1), an entity that is not a covered entity may redisclose a patient health care record it receives under this section only under one of the following circumstances: 1. The patient or a person authorized by the patient provides informed consent for the redisclosure.2. A court of record orders the redisclosure.3. The redisclosure is limited to the purpose for which the patient health care record was initially received.Amended by Acts 2021 ch, 23,s 21, eff. 4/1/2022.Amended by Acts 2021 ch, 130,s 16, eff. 2/6/2022.Amended by Acts 2019 ch, 109,s 38, eff. 8/1/2020.Amended by Acts 2019 ch, 109,s 37, eff. 8/1/2020.Amended by Acts 2017 ch, 59,s 1662, eff. 9/23/2017.Amended by Acts 2015 ch, 351,s 2, eff. 8/1/2016.Amended by Acts 2015 ch, 55,s 3483, eff. 7/14/2015.Amended by Acts 2013 ch, 334,s 45, eff. 8/1/2014.Amended by Acts 2013 ch, 20,s 1900h, eff. 7/2/2013.Amended by Acts 2013 ch, 20,s 1900f, eff. 7/2/2013.Amended by Acts 2013 ch, 20,s 1900e, eff. 7/2/2013.1979 c. 221; 1983 a. 398; 1985 a. 29, 241, 332, 340; 1987 a. 40, 70, 127, 215, 233, 380, 399; 1989 a. 31, 102, 334, 336; 1991 a. 39; 1993 a. 16, 27, 445, 479; 1995 a. 98, 169, 417; 1997 a. 35, 114, 231, 272, 292, 305; 1999 a. 32, 78, 83, 114, 151; 2001 a. 38, 59, 69, 105; 2003 a. 281; 2005 a. 187, 344, 387, 388, 434; 2007 a. 20 s. 9121 (6) (a); 2007 a. 45, 106, 108, 130; 2009 a. 28, 276, 362; 2011 a. 32, 161. Because under s. 905.04(4) (f) there is no privilege for chemical tests for intoxication, results of a test taken for diagnostic purposes are admissible in an OMVWI trial without patient approval. City of Muskego v. Godec, 167 Wis. 2d 536, 482 N.W.2d 79 (1992). Patient billing records requested by the state in a fraud investigation under s. 46.25 [now s. 49.22] may be admitted into evidence under the exception to confidentiality found under sub. (2) (a) 3. State v. Allen, 200 Wis. 2d 301, 546 N.W.2d 517 (1996), 95-0792. This section does not restrict access to medical procedures and did not prevent a police officer from being present during an operation. State v. Thompson, 222 Wis. 2d 179, 585 N.W.2d 905 (Ct. App. 1998), 97-2744. The provision of confidentiality for patient health records is not an absolute bar to the release of information without the patient's informed consent. Sub. (2) provides numerous exceptions. Information of previous assaultive behavior by a nursing home resident was not protected by the physician-patient privilege and was subject to release by "lawful court order." Crawford v. Care Concepts, Inc., 2001 WI 45, 243 Wis. 2d 119, 625 N.W.2d 876, 99-0863. In the event of a release of confidential health information in violation of HIPAA or this section, the proper remedy is not suppression of the released information. Neither HIPAA nor this section provides for suppression of evidence as a remedy for a violation. Suppression is warranted only when evidence has been obtained in violation of a defendant's constitutional rights or if a statute specifically provides for suppression as a remedy. State v. Straehler, 2008 WI App 14, 307 Wis. 2d 360, 745 N.W.2d 431, 07-0822. This section does not reach beyond protection of health care records. A nurse's verbal statements based upon her observations are not protected by this section. State v. Straehler, 2008 WI App 14, 307 Wis. 2d 360, 745 N.W.2d 431, 07-0822. This section does not apply when a health care organization's employee merely accesses a patient health care record without disclosing any information from the record to anyone outside the organization. Interpreting this section to apply to the dissemination of patient health care records from the organization holding the records to its own employees would assuredly lead to unreasonable results. Wall v. Pahl, 2016 WI App 71, 371 Wis. 2d 716, 886 N.W.2d 373, 15-1230. Disclosure of patient health care records in Wisconsin. Lehner. WBB Aug. 1984. Confidentiality of Medical Records. Meili. Wis. Law. Feb. 1995. New Federal Privacy Rule for Health Care Providers, Part II: Balancing Federal and Wisconsin Medical Privacy Laws. Hartin. Wis. Law. June 2003. Attorney Access To and Use of Medical Records. Stone. Wis. Law. Aug. 2003. Practice Tips: Attorney Access to Medical Records. Stone. Wis. Law. Oct. 2003.