Rule set sha256:2dd04f614be2
HIPAA_PHI_INPUT_001
One rule of the rule set with digest 2dd04f614be27ad02c913058bc1c1818342ff069ca53753b390042a3b2cdc95d. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | HIPAA_PHI_INPUT_001 |
|---|---|
| Rule version | 45047498c8bbbd8b81705d812ba32da9e4b8c62d748d30075b04c8ac57d6035e |
| Provision | 45 CFR 164.502(a) (HIPAA Privacy Rule) Official publication: https://www.ecfr.gov/current/title-45/section-164.502 |
| Approval | Not approved |
rules/regulations/us/hipaa_phi_input_detection.yaml
- Citation
- 45 CFR §164.502(a) Standard. A covered entity or business associate may not use or disclose protected health information, except as permitted or required by this subpart or by subpart C of part 160 of this subchapter. §164.502(b)(1) Minimum necessary applies: When using or disclosing protected health information or when requesting protected health information from another covered entity or business associate, a covered entity or business associate must make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose of the use, disclosure, or request.
- Condition
- Proactively detects protected health information in user inputs before processing
- Condition type
- regex
- Status in the file
- No status recorded.