(a) General rule.--Except as provided in subsection (b), no organ procurement organization, eye bank or tissue bank may divulge any individually identifiable information acquired in the course of performing the organization's or bank's responsibilities under this chapter except for the purposes of facilitating transplantation of vascularized composite allografts.
(b) Donors and recipients.--An organ procurement organization, eye bank or tissue bank may communicate individually identifiable information of the donor and recipient if expressly authorized by:
(1) the recipient; and
(2) if the donor is alive, the donor, or, if the donor is deceased, the next of kin of the donor.