Iowa Code Title VI. Human Services [Chs. 216-255A] § 228.5. Administrative disclosures

1. An individual or an individual's legal representative shall be informed that mental health information relating to the individual may be disclosed to employees or agents of or for the same mental health facility or to other providers of professional services or their employees or agents if and to the extent necessary to facilitate the provision of administrative and professional services to the individual.

3. A mental health professional or an employee of or agent for a mental health facility may disclose mental health information if necessary for the purpose of conducting scientific and data research, management audits, or program evaluations of the mental health professional or mental health facility, to persons who have demonstrated and provided written assurances of their ability to ensure compliance with the requirements of this chapter. The persons shall not identify, directly or indirectly, an individual in any report of the research, audits, or evaluations, or otherwise disclose individual identities in any manner. A disclosure under this section is not subject to the requirements of section 228.2, subsection 2, with the exception that a person receiving mental health information under this section shall be provided a statement prohibiting redisclosure of information unless otherwise authorized by this chapter.

4. Mental health information relating to an individual may be disclosed to other providers of professional services or their employees or agents if and to the extent necessary to facilitate the provision of administrative and professional services to the individual including to an employee of the department of corrections, if authorized by the director of the department of corrections, or to an employee of a judicial district department of correctional services, if authorized by the director of the judicial district department of correctional services.