There are permitted uses and disclosures of PHI for different purposes within the healthcare sector. All employees of an organization that acts as a covered entity or business associate must be aware of these guidelines. It is always permitted to use and disclose PHI for treatment, payment and health care operations. If the reason for disclosing the PHI is not for one of these purposes an authorization must be obtained. By following these guidelines, an organization may stay in compliance with HIPAA’s rules and be able to share protected health information.
This article is a review of permitted uses and disclosure of protected health information.