What is the difference between “consent” and “authorization” under the HIPAA Privacy Rule?
The Privacy Rule permits, but does not require, a covered [...]
Does the HIPAA Privacy Rule permit doctors, nurses, and other health care providers to share patient health information for treatment purposes without the patient’s authorization?
Yes. The Privacy Rule allows those doctors, nurses, hospitals, laboratory [...]
Can an authorization be used together with other written instructions from the intended recipient of the information?
A transmittal or cover letter can be used to narrow [...]
Does the Privacy Rule require that an authorization be notarized or include a witness signature?
The Privacy Rule does not require that a document be [...]
May a covered entity disclose protected health information specified in an authorization, even if that information was created after the authorization was signed?
Yes, provided that the Authorization encompasses the category of information [...]
Must an authorization include an expiration date?
The Privacy Rule requires that an Authorization contain either an [...]
Is a copy, facsimile, or electronically transmitted version of a signed authorization valid under the Privacy Rule?
Yes. Under the Privacy Rule, a covered entity may use [...]
Can an individual revoke his or her authorization?
Yes. The Privacy Rule gives individuals the right to revoke, [...]
May a valid authorization list categories of persons who may use or disclose protected health information, without naming specific individuals or entities?
Yes. One Authorization form may be used to authorize uses [...]
Does the Privacy Rule permit a covered entity to use or disclose protected health information pursuant to an authorization form that was prepared by a third party?
Yes. A covered entity is permitted to use or disclose [...]