Georgia Code Title 31. Health § 31-7-285

(a) Notwithstanding any provision of law to the contrary, it shall not be unlawful for any entity which may be requested or required to provide data to the department under this article so to provide that information or for the department or its designees to provide such information as authorized or required by this article or any other law.

(b) Information provided to the department pursuant to this article or information released by the department shall not identify a patient by name or specific address. Any person, firm, corporation, association, or other entity who violates this subsection shall be guilty of a misdemeanor.

(c) A person shall not be civilly liable as a result of the person's acts, omissions, or decisions as an officer or employee or agent in connection with the person's duties for the department under this article.

(d) Unless otherwise provided in this article, the data collected by and furnished to the department pursuant to this article shall not be public records under Article 4 of Chapter 18 of Title 50 or any other law governing the maintenance, inspection, or dissemination of data collected by the state. The reports prepared for release or dissemination from the data collected shall be public records under Article 4 of Chapter 18 of Title 50. The confidentiality of patients shall be protected and no provision of this article shall affect any provision of law relating to patient confidentiality.

(e) No cause of action shall arise against a person, entity, or health care provider for disclosing or reporting information in accordance with this article; provided, however, that this Code section shall not provide immunity for disclosing or furnishing false information with malice or willful intent to injure any person.