(a) All individual morbidity case reports received by the health authority or the Department of State Health Services (department) are confidential records and not public records.(b) To implement disease control measures authorized in these sections, it may be necessary for the health authority or the department to investigate public or private health records including patient medical records pertinent to the notifiable condition. On request, a person shall provide the department with records, data, and other information according to the written instruction of the department. The health authority and the department shall keep this information confidential.(c) The department may use information obtained from reports or health records for statistical and epidemiological studies which may be public information as long as the information does not permit the identification of an individual.