Texas Insurance Code - INS § 602.051. Authorization For Disclosure of Certain Health Information

(a) Except as provided by Section 602.053, a covered entity must obtain authorization to disclose nonpublic personal health information before disclosing the information.

(b) A request for authorization to disclose nonpublic personal health information may be in written or electronic form and must:

(c) The period for which the authorization is valid may not exceed 24 months.

(d) The right of a consumer or customer to revoke an authorization at any time is subject to the rights of an individual who, before receiving notice of a revocation, acted in reliance on the authorization.

(e) The covered entity shall retain the original or a copy of the authorization in the records of the individual who is the subject of the nonpublic personal health information.