Ohio Admin. Code § 3701-3-08
Release of Patient's Medical Records
(A) Any person, hospital, clinic, agency or other institution or
facility providing care or treatment to an individual suffering from a
communicable disease which is required to be reported under Chapter
3701. of the Revised Code and the rules adopted thereunder by the public
health council, or a disease that the director requires special inquiry
be made under sections 3701.13 and 3701.14 of the Revised Code, shall,
upon written request by the director provide access to the patient's
medical record to the director during an investigation of such disease.
(B) All information that is furnished to or procured by the director
under Chapter 3701-3 of the Administrative Code shall be used
exclusively to carry out the director's mandated duties, including the
duty to control and suppress disease, especially when contagious,
infectious, epidemic, or endemic, as set forth in section 3701.14 of the
Revised Code. The director shall not release such information without
the patient's consent, except as may be necessary to provide services to
that individual or as necessary to carry out the director's mandated
duties. However, such information may be disclosed in statistical or
other form, which does not reasonably tend to disclose the identity of
any individual.