Okla. Stat. tit. 36, § 36-6562: Disclosure or publication of confidential medical

information.

A private review agent shall not disclose or publish individual

medical records or any other confidential medical information

obtained in the performance of utilization review activities without

the appropriate procedures for protecting the patient's

confidentiality. Provided, however, that nothing in the Hospital

and Medical Services Utilization Review Act shall prohibit a private

review agent from providing patient information to a third party

with whom the private review agent is affiliated, under contract, or

for whom the agent is acting.