Prohibits a person who administers or control the electronic health record of a patient from disclosing sensitive test results to a patient or patient representative by electronic means before the third day after the sensitive test results are finalized