(1) All records and files of the office, the contracting advocacy organization, and any certified behavioral health consumer advocates related to any complaint or investigation made pursuant to carrying out their duties and the identities of complainants, witnesses, patients, residents, or clients and information that could reasonably identify any of these individuals shall remain confidential unless disclosure is authorized in writing by the subject of the information, or the subject's guardian or legal representative.

(2) No disclosures of records and files related to a complaint or investigation may be made to any organization or individual outside the office or the contracting advocacy organization without the written consent of any named witnesses, complainants, patients, residents, or clients unless the disclosure is made without the identity of any of these individuals and without information that could reasonably identify any of these individuals unless such disclosure is required in carrying out its duties under this chapter.

(3) Notwithstanding subsections (1) and (2) of this section, disclosures of records and files may be made pursuant to a court order.

(4) All disclosures must be compliant with state and federal privacy laws applicable to the type of information that is sought for disclosure.