Subject to section 15, no person may disclose any information contemplated in subsection (1) unless-
(a) the user consents to that disclosure in writing;
(b) a court order or any law requires that disclosure; or
(c) non-disclosure of the information represents a serious threat to public health.