Individuals have a right to privacy in health care. In a public health crisis, it may be necessary to override this right to protect the public from serious harm. A proportionate response to the need for private information requires that it be released only if there are no less intrusive means to protect public health.