Rule set sha256:2dd04f614be2
HIPAA_MINIMUM_NECESSARY_001
One rule of the rule set with digest 2dd04f614be27ad02c913058bc1c1818342ff069ca53753b390042a3b2cdc95d. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | HIPAA_MINIMUM_NECESSARY_001 |
|---|---|
| Rule version | 18431ff73d0bc10d35d36958b9ff3004c238bea2a3f95a4ed296c178c0c94d82 |
| Provision | 45 CFR 164.502(b) (HIPAA Privacy Rule, minimum necessary) Official publication: https://www.ecfr.gov/current/title-45/section-164.502 |
| Approval | Not approved |
rules/regulations/us/hipaa_minimum_necessary.yaml
- Citation
- 45 CFR §164.502(b)(1) Minimum necessary applies: When using or disclosing protected health information or when requesting protected health information from another covered entity or business associate, a covered entity or business associate must make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose of the use, disclosure, or request. §164.502(b)(2) Minimum necessary does not apply. This requirement does not apply to: (i) Disclosures to or requests by a health care provider for treatment; (ii) Uses or disclosures made to the individual; (iii) Uses or disclosures made pursuant to an authorization under §164.508; (iv) Disclosures made to the Secretary in accordance with subpart C of part 160 of this subchapter; (v) Uses or disclosures that are required by law; (vi) Uses or disclosures that are required for compliance with applicable requirements of this subchapter.
- Condition
- Requires covered entities and business associates to make reasonable efforts to limit uses, disclosures, and requests of protected health information (PHI) to the minimum necessary to accomplish the intended purpose. HIPAA Privacy Rule, 45 CFR §164.502(b).
- Condition type
- regex, semantic
- Status in the file
- No status recorded.