ComplianceOnline

HIPAA Privacy Rule - Required Disclosures


A covered entity must disclose protected health information in only two situations:

  1. to individuals (or their personal representatives) specifically when they request access to, or an accounting of disclosures of, their protected health information; and
  2. to HHS when it is undertaking a compliance investigation or review or enforcement action