May a covered entity disclose protected health information specified in an authorization, even if that information was created after the authorization was signed?
Yes, provided that the authorization encompasses the category of information that was later created, and that the authorization has not expired or been revoked by the individual. Unless otherwise expressly limited by the authorization, a covered entity may use or disclose the protected health information identified on the authorization regardless of when the information was created.
Related Questions
- Does the Privacy Rule permit a covered entity to use or disclose protected health information pursuant to an authorization form that was prepared by a third party?
- May a covered entity disclose protected health information specified in an authorization, even if that information was created after the authorization was signed?
- May a covered entity use or disclose protected health information for litigation?
