Under the Privacy Rule can a covered entity honor an individual authorization form that is a faxed copy rather than the original form?
Yes. Health and Human Services (HHS) stated with respect to this question that covered entities may rely upon a faxed copy of an individual authorization form as long as it is legible. The original is not required to meet the covered entity’s responsibilities under the Privacy Rule. HHS also considers a copy or electronically transmitted version of a signed authorization a valid authorization under the Privacy Rule.
Related Questions
- What are a covered entity’s obligations under the HIPAA Privacy Rule with respect to protected health information held by a business associate during the contract transition period?
- Does the Privacy Rule permit a covered entity to use or disclose protected health information pursuant to an authorization form that was prepared by a third party?
- As an employee of the JHM covered entity, how does the HIPAA Privacy Rule affect my research?
