(a) Notwithstanding any of the confidentiality provisions in Chapter 11A of this title, or any other provisions of law, every public and private health care provider shall, upon request of the persons or entities herein identified, provide information concerning the immunization status of any patient in accordance with rules promulgated by the State Board of Health to the following persons and entities:

(1) Other public and private health care providers.

(2) Health care insurers of all descriptions.

(3) The Alabama Medicaid Agency.

(4) Individuals and organizations with a need to verify the immunization status of persons in their care, custody, or enrollment, including but not limited to, the chief executive officer, or a designee of the officer, of a public or private day care center, school, or postsecondary educational institution.

(b) The authorization granted pursuant to this chapter shall be exercised solely for the purpose of implementing and operating proper immunization programs as determined by the State Board of Health and for updating or verifying the immunization status of individuals in the care, custody, or enrollment of the person requesting or accessing the information pursuant to 42 CFR, Section 431.302, Subpart F, safeguarding information pertaining to Medicaid recipients.

Pursuant to and in furtherance of the purposes of this chapter, the State Board of Health is authorized to create and maintain an immunization registry. The immunization registry is the central collection of data and reports concerning a vaccine dose or doses administered to a person by a provider. The nature of the immunization information contained in this registry shall be determined by rule of the State Board of Health and shall be obtained from clinic records, billing data and information, and vital or any other records owned and controlled by the State Board of Health and the Alabama Medicaid Agency. Medical insurers and public and private providers are authorized and encouraged to provide information to the registry.

Medicaid recipients shall be deemed to have given their consent to the release by the State Medicaid Agency of information to the State Board of Health or any other health care provider by virtue of their receipt of Medicaid covered services.

All persons, firms, corporations, or other public or private entities and all officers, agents, servants, or employees who provide information for exchange in good faith pursuant to this chapter shall be immune from civil and criminal liability for those actions and no cause of action shall be created by their acts or omissions hereunder.