What is an “authorization”?
A. An Authorization is a HIPAA form through which a participant or beneficiary allows his or her PHI to be used for a particular purpose which is not one of the standard purposes under HIPAA. Authorizations are not required in many cases, such as for treatment of participants, payment of their claims, or general operation of the health plan. The contents of a valid Authorization are strictly regulated by HIPAA.