Rule set sha256:adf208a05da8

HIPAA_PHI_DISCLOSURE_001

One rule of the rule set with digest adf208a05da8edfde9ef5c5a1359104382ac794a5b4ec0d0aaca2fd21e90574c. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.

RuleHIPAA_PHI_DISCLOSURE_001
Rule version04eb9fe9961aa27ff478a8798d5ea7d790c48452e454c2b71a67e868b59b92f0
Provision45 CFR 164.502(a) (HIPAA Privacy Rule)
Official publication: https://www.ecfr.gov/current/title-45/section-164.502
ApprovalApproved
Approved by Leo Celis on 2026-10-16

rules/regulations/us/hipaa_phi_disclosure.yaml

Citation
45 CFR §164.502(a) Standard. A covered entity or business associate may not use or disclose protected health information, except as permitted or required by this subpart or by subpart C of part 160 of this subchapter.
Condition
Protected Health Information (PHI) cannot be disclosed without patient authorization
Condition type
metadata, regex
Status in the file
approved