A doctor cannot disclose any patient information to an unauthorized person. It is unethical.

MCI Ethics Regulation 7.14 states that a registered medical practitioner must not disclose the secrets of a patient that he/she has learnt while exercising his/her profession except in the following situations:

1. In a court of law under the Presiding Judge’s orders;
2. In situations where there is a serious and identified risk to a specific person or community; and
3. In case of notifiable diseases. 

In case of communicable/notifiable diseases, the concerned public health authorities must be informed immediately.

Any violation of the above amounts to professional misconduct and disciplinary action can be taken against the doctor.