A doctor cannot disclose any patient information to an unauthorized person. It is unethical.

MCI Ethics Regulation 7.14 states: “The registered medical practitioner shall not disclose the secrets of a patient that have been learnt in the exercise of his/her profession except –

1. in a court of law under orders of the Presiding Judge;
2. in circumstances where there is a serious and identified risk to a specific person and / or community; and
3. notifiable diseases.

In case of communicable/notifiable diseases, concerned public health authorities should be informed immediately.”

Violation of the above amounts to professional misconduct and renders a doctor liable for disciplinary action.