A.R.S. § 12-2296

A health care provider, contractor or clinical laboratory that acts in good faith under this article is not liable for damages in any civil action for the disclosure of medical records, payment records or clinical laboratory results or information contained in medical records, payment records or clinical laboratory results that is made pursuant to this article or as otherwise provided by law. The health care provider, contractor or clinical laboratory is presumed to have acted in good faith. The presumption may be rebutted by clear and convincing evidence.