Title: Describe authorized use and disclosures.
Course: Healthcare Information Security (14157-II) > Section: Exploring HIPAA Basics

Description should include expectations such as

- individual’s written authorization for any disclosure of PHI that is not for treatment, payment, or healthcare operations otherwise permitted under the Privacy Rule
- written format
- specific terms (i.e., access to a part of the record rather than the whole)
- plain language
- persons disclosing and/or receiving the information
- authorization obtained to disclose any psychotherapy notes.

Process/Skill Questions:

- What are some examples of specific terms?
- Why is it important to establish patient ownership of the healthcare record?
- What is meant by plain language?
- What types of authorization are necessary for disclosures?
- When can PHI be released without authorization?