Section 228I (1) does not apply to the disclosure of confidential information by a relevant person if—
(a) the disclosure is to an employee of the department or a person approved by the chief executive who is contracted by the department to evaluate, manage, monitor or plan health services; or
(b) the disclosure is to an entity prescribed under a regulation for this paragraph for evaluating, managing, monitoring or planning health services as stated in the regulation.