(1) The Ministry shall not without lawful authority disclose health information in any manner that is incompatible with the purposes for which the health information has been collected.
(2) A person, other an employee or agent of the Ministry acting within his or her mandate, shall not —
(a) obtain access to health information, or obtain information constituting the health information, without the prior authorization of the Ministry; and
(b) disclose the health information to another person.
(3) A person shall not offer to sell health information.
(4) A person who contravenes this section commits an offence.