Rule set sha256:ef0271a74ba2

HIPAA_PHI_INPUT_001

One rule of the rule set with digest ef0271a74ba2f80b96890ef958bdd3699e910badcbf1e7578d9efa398d6f21d8. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.

RuleHIPAA_PHI_INPUT_001
Rule version45047498c8bbbd8b81705d812ba32da9e4b8c62d748d30075b04c8ac57d6035e
Provision45 CFR 164.502(a) (HIPAA Privacy Rule)
Official publication: https://www.ecfr.gov/current/title-45/section-164.502
ApprovalNot approved

rules/regulations/us/hipaa_phi_input_detection.yaml

Citation
45 CFR §164.502(a) Standard. A covered entity or business associate may not use or disclose protected health information, except as permitted or required by this subpart or by subpart C of part 160 of this subchapter. §164.502(b)(1) Minimum necessary applies: When using or disclosing protected health information or when requesting protected health information from another covered entity or business associate, a covered entity or business associate must make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose of the use, disclosure, or request.
Condition
Proactively detects protected health information in user inputs before processing
Condition type
regex
Status in the file
No status recorded.