1. Violates professional standards of practice or is against the law.
2. Poses a substantial risk to the health, safety or welfare of a patient.
B. The procedure shall include reasonable measures to maintain the confidentiality of the identity of a health professional providing information to a health care institution pursuant to this section.