confidentiality in health care. Each physician, health care provider, health services corporation and insurance company shall refrain from disclosing the nature or details of services provided to patients, except that such information may be disclosed: (1) to the patient, (2) to the party making treatment decisions if the patient is incapable of making decisions regarding the health services provided, (3) for treatment in accordance with 45 CFR 164.501 and 164.506, (4) for payment in accordance with 45 CFR 164.501 and 164.506, (5) to those parties responsible for peer review, utilization review, and quality assurance, (6) for health care operations in accordance with 45 CFR 164.501 and 164.506, (7) to those parties required to be notified under the Abused and Neglected Child Reporting Act or the Illinois Sexually Transmissible Disease Control Act, or (8) as otherwise permitted, authorized, or required by State or federal law. This right may be waived in writing by the patient or the patient's guardian or legal representative, but a physician or other health care provider may not condition the provision of services on the patient's, guardian's, or legal representative's agreement to sign such a waiver. In the interest of public health, safety, and welfare, patient information, including, but not limited to, health information, demographic information, and information about the services provided to patients, may be transmitted to or through a health information exchange, as that term is defined in Section 2 of the Mental Health and Developmental Disabilities Confidentiality Act, in accordance with the disclosures permitted pursuant to this Section. Patients shall be provided the opportunity to opt out of their health information being transmitted to or through a health information exchange in accordance with the regulations, standards, or contractual obligations adopted by the Illinois Health Information Exchange Office in accordance with Section 9.6 of the Mental Health and Developmental Disabilities Confidentiality Act, Section 9.6 of the AIDS Confidentiality Act, or Section 31.8 of the Genetic Information Privacy Act, as applicable. In the case of a patient choosing to opt out of having his or her information available on an HIE, nothing in this Act shall cause the physician or health care provider to be liable for the release of a patient's health information by other entities that may possess such information, including, but not limited to, other health professionals, providers, laboratories, pharmacies, hospitals, ambulatory surgical centers, and nursing homes.