The remaining 26 jurisdictions did explicitly address the circumstances under which public health officials may disclose public health information (model 2). In these states, the statutory scheme set up a general bar on disclosure but allowed for some exceptions. We found the following 3 common exceptions to the rule against disclosing information in these states: (1) when deemed necessary by public health officials to protect the public’s health or the health of an individual, (2) for statistical analysis and research when certain requirements are met, and (3) disclosure to a contact or for contact-tracing purposes. Almost all of these jurisdictions (23 of 26) had exceptions allowing information disclosure for protecting the public’s health, 10 had at least 2 of the 3 exceptions, and just 5 (AK, AZ, IN, OK, and OR) explicitly allowed for all 3 exceptions