Can telemarketers gain access to protected health information and call individuals to sell goods and services?
Under the HIPAA Privacy Rule, a covered entity can share protected health information with a telemarketer only if the covered entity has either obtained the individual’s prior written authorization to do so, or has entered into a business associate relationship with the telemarketer for the purpose of making a communication that is not marketing, such as to inform individuals about the covered entity’s own goods or services.
Related Questions
- Does the HIPAA Privacy Rule address when a person may not be the appropriate person to control an individuals protected health information?
- Can telemarketers gain access to protected health information and call individuals to sell goods and services?
- Can telemarketers obtain my health information and use it to call me to sell good and services?