Skip Navigation


Are communications about government programs or government-sponsored programs “marketing” under the HIPAA Privacy Rule?

Are health care providers required to seek a prior authorization before discussing a product or service with a patient, or giving a product or service to a patient, in a face-to-face encounter?

Are prior authorizations required when a doctor or health plan distributes promotional gifts of nominal value?

Can a doctor or pharmacy be paid by a pharmaceutical manufacturer to make a prescription refill reminder without an individual’s prior authorization under the HIPAA Privacy Rule?

Can contractors (business associates) use protected health information for its own marketing purposes?

Can health plans communicate about health-related products or services to enrollees that add value to, but are not part of, a plan of benefits?

Can telemarketers obtain my health information and use it to call me to sell good and services?

Do disease management, health promotion, preventive care, and wellness programs fall under the HIPAA Privacy Rule's definition of "marketing"?

Does the HIPAA Privacy Rule expand the ability of providers, plans, marketers and others to use my protected health information to market goods and services to me? Does the Privacy Rule make it easier for health care businesses to engage in door-to-door sales and marketing efforts?

How can I distinguish between activities for treatment or health care operations versus marketing activities?

Is it marketing for a covered entity to describe products or services that are provided by the covered entity to its patients, or to describe products or services that are included in the health plan's plan of benefits of the health plan?

Is it marketing for a covered entity to describe the entities participating in a health care provider network or a health plan network?

Is it marketing for an insurance plan or health plan to send enrollees notices about changes, replacements, or improvements to existing plans?

May covered entities use information regarding specific clinical conditions of individuals in order to communicate about products or services for such conditions without a prior authorization?

Must insurance agents that are business associates of a health plan seek a prior authorization before talking to a customer in a face-to-face encounter about the insurance company's other lines of business?

What are examples of "alternative treatments" that are excepted from the HIPAA Privacy Rule's definition of "marketing"?

What effect do the “marketing” provisions of the HIPAA Privacy Rule have on Federal or State fraud and abuse statutes?

When is an authorization required from the patient before a provider or health plan engages in marketing to that individual?