This bill amends the Mental Health Law to specify the circumstances under which confidential information and records can be disclosed. It adds a new provision that allows information and records to be disclosed to any vendor, agent, contractor, or designee who operates an electronic health record, health information exchange, or clinical management system. The bill also requires written consent from the patient or their guardian for any disclosures that are not allowed under the specified circumstances, and for the disclosure of psychotherapy notes. The bill also establishes penalties for violations of the confidentiality provisions.

Additionally, the bill requires that when any disclosure of information or records is made, the physician or professional person in charge of the patient or facility must promptly enter the details of the disclosure into the patient's medical record. This requirement also applies to disclosures made through automated electronic exchanges. The documentation related to the disclosure must be made available to the patient or their guardian upon request. The bill would take effect upon passage.