Purpose.

(a) Purpose. This chapter:

(1) Governs the treatment of all nonpublic personal health information about individuals by various licensees of the Department.

(2) Describes the conditions under which a licensee may disclose nonpublic personal health information about consumers to a third party.

(3) Requires licensees to obtain an authorization from consumers prior to disclosing nonpublic personal health information, unless otherwise permitted in this chapter.

(b) Compliance. A licensee domiciled in this Commonwealth that is in compliance with this chapter and Chapter 146a (relating to privacy of consumer financial information) in a state that has not enacted laws or regulations that meet the requirements of Title V of the act of November 12, 1999 (Pub. L. No. 106-102, 113 Stat. 1338) known as the Gramm-Leach-Bliley Act (Financial Services Modernization Act of 1999) (15 U.S.C.A. § § 6801—6827) may nonetheless be deemed to be in compliance with Title V of the Gramm-Leach-Bliley Act in the other state.

(c) Examples. The examples provided in this chapter are for illustrative purposes only and do not otherwise limit or restrict the scope of this chapter.