A health care provider may disclose health care information about a patient without the patient's authorization if the disclosure is:
(1) directory information, unless the patient has instructed the health care provider not to make the disclosure;
(2) to federal, state, or local public health authorities, to the extent the health care provider is required by law to report health care information or when needed to protect the public health;
(3) to federal, state, or local law enforcement authorities to the extent required by law;
(4) to a law enforcement officer about the general physical condition of a patient being treated in a health care facility if the patient was injured on a public roadway or was injured by the possible criminal act of another;
(5) in response to a request of the office of victims services for information under 53-9-104 (2)(b);
(6) pursuant to compulsory process in accordance with 50-16-535 and 50-16-536;
(7) pursuant to 50-16-712; or
(8) to the state medical examiner or a county coroner for use in determining cause of death. The information is required to be held confidential as provided by law.