A person whose information is being kept confidential or the legal guardian or legal custodian of such person may be denied access to information if the information was obtained from someone other than a health care provider under a promise of confidentiality, the access requested would be reasonably likely to reveal the confidential source of the information and the requested information cannot be presented in a manner that preserves the confidentiality of the source. The Department incorporatesHIPAA, 42 C.F.R. § 164.524(a)(2)(v)(2006) only as guidance in applying this section.
Okla. Admin. Code § 310:515-3-3