Health care providers, insurance companies, and their contractors must disclose medical information when a patient or patient’s representative requests the information, when they receive a court order, in civil and criminal legal proceedings, for many purposes involving death investigations, and when otherwise required by law.