(a) A member of the review committee or a person employed by or acting in an advisory capacity to the review committee and who provides information, counsel, or services to the review committee is not liable for damages for an action taken within the scope of the functions of the review committee.
(b) Subsection (a) does not apply if the person acts with malice or without the reasonable belief that the action is warranted by the facts known to the person.
(c) This section does not provide immunity to a person described by Subsection (a) for a violation of a state or federal law or rule relating to the privacy of health information or the transmission of health information, including the Health Insurance Portability and Accountability Act of 1996 (Pub. L. No. 104-191) and rules adopted under that Act.