The confidentiality of alcohol and drug abuse patient records maintained by this program is
protected by federal law and regulations. Generally, the program may not say to a person outside
the program that a patient attends the program, or disclose any information identifying a patient as
an alcohol or drug abuser even if:

A.
)The person outside the program gives a written request for the information

B.
the patient consent in writing

C.
the disclosure is allowed by a court order

D.
the disclosure is made to medical personnel in a medical emergency or to qualified personnel
for research, audit, or program evaluation.

Explanation:
Incident handling is not related to disaster recovery, it is related to security incidents.