For HIPAA, when a provider believes in good faith that a warning to law enforcement, family mem- bers of the patient or others is necessary to prevent or lessen a serious and imminent threat to the health or safety of the patient or others, the privacy rule allows the provider, consistent with appli- cable law and standards of ethical conduct, to alert those people whom the provider believes are reasonably able to prevent or lessen the threat. They may notify the family to watch for symptoms, even if harm is not imminent
Under 42 CFR Part 2 § 2.63 confidential communications may be disclosed pursuant to “(a) A court order under the regulations in this part may authorize disclosure of confidential communications made by a patient to a part 2 program in the course of diagnosis, treatment, or referral for treat- ment only if: (1) The disclosure is necessary to protect against an existing threat to life or of serious bodily injury, including circumstances which constitute suspected child abuse and neglect and ver- bal threats against third parties.”