What disclosures does HIPAA allow?
• Covered entities may disclose protected health information for treatment, payment, and certain health care operations of another covered entity. • When legal ownership of a covered entity changes, protected health information may be disclosed to the new covered entity, with appropriate care. • A covered entity may disclose protected health information to the FDA, about FDA-regulated products. • Incidental uses or disclosures are not considered a violation of the Rule if the covered entity has met reasonable safeguards and minimum requirements. Covered providers have up to an additional year to bring business associate contracts into compliance with the requirements, and HHS has provided sample contract provisions. What are the exceptions to the Privacy Rule? The following disclosures do not need an individuals permission: • Disclosures that are required by law • Disclosures related to public health • Disclosures for health oversight activities • Disclosures for specialized government
Related Questions
- Do the HIPAA Privacy Rules provisions permitting certain incidental uses and disclosures apply only to treatment situations or discussions among health care providers?
- Has the Secretary exceeded the HIPAA statutory authority by requiring "satisfactory assurances" for disclosures to business associates?
- What types of disclosures may a covered entity permissibly make to a school nurse under HIPAA?
