By using this site you agree to our use of cookies. Please refer to our privacy policy for more information.  Close
ComplianceOnline

HIPAA Privacy Rule - Required Disclosures


A covered entity must disclose protected health information in only two situations:

  1. to individuals (or their personal representatives) specifically when they request access to, or an accounting of disclosures of, their protected health information; and
  2. to HHS when it is undertaking a compliance investigation or review or enforcement action