This bill amends the Mental Health Law to specify the circumstances under which confidential information and records can be disclosed. It adds a new provision that allows disclosure of information and records to any vendor, agent, contractor, or designee who operates an electronic health record, health information exchange, or clinical management system for the purpose of fulfilling certain specified purposes. The bill also requires written consent from the patient or guardian for any disclosures for purposes other than those allowed in the law and for the disclosure of psychotherapy notes. It also allows for the disclosure of psychotherapy notes without written consent in the course of court proceedings. The bill also specifies the penalties for violating the confidentiality provisions and requires documentation related to disclosure of information or records to be made available to the patient upon request.

This bill also requires the physician or professional person in charge of the patient or facility to promptly record any disclosures of information or records in the patient's medical record. It also requires the appropriate system operator to promptly record any disclosures made through automated electronic exchanges. Documentation related to disclosure of information or records must be made available to the patient upon request. The bill would take effect upon passage.