(a) When any disclosure of information or records is made, the physician in charge of the patient or the professional person in charge of the facility, or their designee, shall promptly cause to be entered into the patient’s medical record the date and circumstances under which the disclosure was made, the names, and relationships to the patient, if any, of the person or agencies to whom the disclosure was made, and the information disclosed.
(b) When any disclosure of information or records is made through automated electronic exchanges such as those facilitated by electronic health records or health information exchanges, the appropriate system operator shall promptly record the date and circumstances under which the disclosure was made, the names and relationships to the patient, if any, of the person or agencies to whom the disclosure was made, and the information disclosed.
(c) Documentation related to disclosure of information or records, including the content thereof, as required under subsections (a) and/or (b) of this section, shall be made available to the patient upon the patient’s or the patient’s guardian’s request.