Colorado Revised Statutes Title 25. Health § 25-4-406. Reports--confidentiality

(1) The public health reports required pursuant to section 25-4-405 and any records resulting from compliance with that section held by the state department and county and district public health agencies, or any health-care provider, facility, third-party payer, physician, clinic, laboratory, blood bank, health records database, or other agency, are confidential information. The information shall only be released, shared with any agency or institution, or made public, upon subpoena, search warrant, discovery proceedings, or otherwise, under the following circumstances:

(1.5) In accordance with subsection (1)(a) of this section, for statistical purposes, the state department shall make available to county and district public health agencies de-identified case rate data for syphilis that is specific to the county or district, which data must remain confidential pursuant to this section.

(2) An officer or employee of the state department or a local public health agency must not be examined in any judicial, executive, legislative, or other proceedings as to the existence or content of any individual's report by such department pursuant to this part 4 or as to the existence of the content of the reports received pursuant to section 25-4-405 or the result of an investigation conducted pursuant to section 25-4-408. The provisions of this subsection (2) do not apply to administrative or judicial proceedings held pursuant to section 25-4-412 or 25-4-413.

(3) Information in medical records concerning the diagnosis and treatment of a sexually transmitted infection is considered medical information, is not part of public health reports, and is protected from unauthorized disclosure pursuant to the provisions of section 18-4-412, C.R.S.