Rule set sha256:bd65ec208a53
HIPAA_PHI_DISCLOSURE_001
One rule of the rule set with digest bd65ec208a532545cac038041e8bb3c2f62a09305837af00fa0917875f49eb75. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | HIPAA_PHI_DISCLOSURE_001 |
|---|---|
| Rule version | 5639bc5c95bf403b725a7ccf3f738e3e99b99c65465b42d0ad1464fc05b6373d |
| Provision | 45 CFR 164.502(a) (HIPAA Privacy Rule) Official publication: https://www.ecfr.gov/current/title-45/section-164.502 |
| Approval | Not approved |
rules/regulations/us/hipaa_phi_disclosure.yaml
- Citation
- 45 CFR §164.502(a) Standard. A covered entity or business associate may not use or disclose protected health information, except as permitted or required by this subpart or by subpart C of part 160 of this subchapter.
- Condition
- Protected health information (PHI) may be used or disclosed only as the HIPAA Privacy Rule permits or requires, for example for treatment, payment or health care operations (45 CFR 164.506), for the purposes in 45 CFR 164.512, or with a valid authorization (45 CFR 164.508).
- Condition type
- regex; metadata condition in the file, not run by the engine
- Status in the file
- review