. . "(3) the person who performs the genetic or health care services does not disclose protected genetic information to anyone except to the employee who uses the services for treatment of the individual; pursuant to section 1???202(d) of this order; for program evaluation or assessment; for compiling and analyzing information in anticipation of or for use in a civil or criminal legal proceeding; or, f" . .