Uses and disclosures required by law

§164.512(a)(1) – A covered entity may use or disclose protected health information to the extent that such use or disclosure is required by law and the use or disclosure complies and is limited to the relevant requirements of such law.

§164.512(a)(2) – A covered entity must meet the requirements described in paragraph (c), (e), or (f) of this section for uses or disclosures required by law.

Audit Inquiry

Does the covered entity use and disclose PHI pursuant to requirements of other law? If so, are such uses and disclosures made consistent with the requirements of this performance criterion as well as the applicable requirements related to victims of abuse, neglect or domestic violence, pursuant to judicial and administrative proceedings and law enforcement purposes of this section? Obtain and review policies and procedures for uses and disclosures required by law.