Rule set sha256:adf208a05da8
HIPAA_PHI_INPUT_001
One rule of the rule set with digest adf208a05da8edfde9ef5c5a1359104382ac794a5b4ec0d0aaca2fd21e90574c. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | HIPAA_PHI_INPUT_001 |
|---|---|
| Rule version | 6ebef6f42566dfb8d59aefbd179e3ec4c254ded1a8ebf37bb85bc12a85bc8b65 |
| Provision | 45 CFR 164.502(a) (HIPAA Privacy Rule) Official publication: https://www.ecfr.gov/current/title-45/section-164.502 |
| Approval | Approved Approved by Leo Celis on 2026-10-16 |
rules/regulations/us/hipaa_phi_input_detection.yaml
- Citation
- 45 CFR §164.502(a) Standard. A covered entity or business associate may not use or disclose protected health information, except as permitted or required by this subpart or by subpart C of part 160 of this subchapter. §164.502(b)(1) Minimum necessary applies: When using or disclosing protected health information or when requesting protected health information from another covered entity or business associate, a covered entity or business associate must make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose of the use, disclosure, or request.
- Condition
- Proactively detects protected health information in user inputs before processing
- Condition type
- regex
- Status in the file
- approved