(a) Except as provided by Subsection (b), an operator or other person may not disclose a customer record required by Section 145.008(i).
(b) An operator or other person may disclose a customer record:
(1) if the customer, or a person authorized to act on behalf of the customer, requests the record;
(2) if a health authority requests the record under Section 145.011;
(3) if the customer consents in writing to the disclosure to another person;
(4) in a criminal proceeding in which the customer is a victim, witness, or defendant;
(5) if the record is requested in a criminal or civil proceeding by court order or subpoena; or
(6) as otherwise required by law.