No cause of action in the nature of defamation, invasion of privacy, or negligence shall arise against any person for disclosing personal or privileged information in accordance with this article, nor shall such a cause of action arise against any person for furnishing personal or privileged information to an insurance institution, agent, or insurance-support organization. However, this section shall provide no immunity for disclosing or furnishing false information with malice or willful intent to injure any person.
Va. Code § 38.2-618