Skip to main content
U.S. flag

An official website of the United States government

Here’s how you know

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

HTTPS

Secure .gov websites use HTTPS
A lock (LockA locked padlock) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Freedom 250 banner logo Join HHS in Celebrating Freedom 250
  • About HHS
  • RealFood.gov
  • MAHA
  • Programs & Services
  • Grants & Contracts
  • Laws & Regulations
  • Radical Transparency
  • Coronavirus
  • Grants
  • Health Insurance Reform
  • HHS Administrative
  • HIPAA
  • Medicare and Medicaid
  • Programs for Families and Children
  • Public Health and Safety

Category: Marketing

Topics:

Authorizations, Covered Entities, Marketing, Smaller Providers and Businesses

The HIPAA Privacy Rule expressly requires an authorization for uses or disclosures of protected health information for ALL marketing communications, except in two circumstances:

Read the full answer

The HIPAA Privacy Rule expressly requires an authorization for uses or disclosures of protected health information for ALL marketing communications, except in two circumstances:

Read the full answer

The HIPAA Privacy Rule expressly requires an authorization for uses or disclosures of protected health information for ALL marketing communications, except in two circumstances:

Read the full answer

The HIPAA Privacy Rule expressly requires an authorization for uses or disclosures of protected health information for ALL marketing communications, except in two circumstances:

Read the full answer

Marketing, Smaller Providers and Businesses

No. The HIPAA Privacy Rule excludes from the definition of “marketing” communications made to describe a covered entity’s health-related product or service (or payment for such product or service) that is provided by, or included in a plan of benefits of, the covered entity making the communication.

Read the full answer

No. In a specific exception, the HIPAA Privacy Rule allows covered entities to distribute items commonly known as promotional gifts of nominal value without prior authorization, even if such items are distributed with the intent of encouraging the receiver to buy the products or services.

Read the full answer

In face-to-face encounters, the HIPAA Privacy Rule allows covered entities to give or discuss products or services, even when not health-related, to patients without a prior authorization. This exception prevents unnecessary intrusion into the doctor-patient relationship.

Read the full answer

No. The HIPAA Privacy Rule excludes from the definition of “marketing,” communications about replacements of, or enhancements to, a health plan.

Read the full answer

The HIPAA Privacy Rule excludes from the definition of “marketing,” communications by a covered entity to describe the entities participating in a health care provider network or a health plan network.

Read the full answer

The Privacy Rule makes it clear that nothing in the marketing provisions of the Privacy Rule are to be construed as amending, modifying, or changing any rule or requirement related to any other Federal or State statutes or regulations, including specifically anti-kickback, fraud and abuse, or self-referral statutes or regulations, or to authorize or permit any activity or transaction currently proscribed by such statutes and regulations.

Read the full answer

Generally, no. To the extent the disease management or wellness program is operated by the covered entity directly or by a business associate, communications about such programs are not marketing because they are about the covered entity’s own health-related services.

Read the full answer

Yes, if the communication is for the individual’s treatment or for case management, care coordination, or the recommendation of alternative therapies.

Read the full answer

The Privacy Rule makes it clear that nothing in the marketing provisions of the Privacy Rule are to be construed as amending, modifying, or changing any rule or requirement related to any other Federal or State statutes or regulations, including specifically anti-kickback, fraud and abuse, or self-referral statutes or regulations, or to authorize or permit any activity or transaction currently proscribed by such statutes and regulations.

Read the full answer

Yes, if the communication is for the individual’s treatment or for case management, care coordination, or the recommendation of alternative therapies.

Read the full answer

In face-to-face encounters, the HIPAA Privacy Rule allows covered entities to give or discuss products or services, even when not health-related, to patients without a prior authorization. This exception prevents unnecessary intrusion into the doctor-patient relationship.

Read the full answer

No. In a specific exception, the HIPAA Privacy Rule allows covered entities to distribute items commonly known as promotional gifts of nominal value without prior authorization, even if such items are distributed with the intent of encouraging the receiver to buy the products or services.

Read the full answer

No. The HIPAA Privacy Rule excludes from the definition of “marketing,” communications about replacements of, or enhancements to, a health plan.

Read the full answer

The HIPAA Privacy Rule excludes from the definition of “marketing,” communications by a covered entity to describe the entities participating in a health care provider network or a health plan network.

Read the full answer

No. The HIPAA Privacy Rule excludes from the definition of “marketing” communications made to describe a covered entity’s health-related product or service (or payment for such product or service) that is provided by, or included in a plan of benefits of, the covered entity making the communication.

Read the full answer

Generally, no. To the extent the disease management or wellness program is operated by the covered entity directly or by a business associate, communications about such programs are not marketing because they are about the covered entity’s own health-related services.

Read the full answer

Marketing, Smaller Providers and Businesses, Marketing - Smaller Providers and Businesses

Alternative treatments are treatments that are within the range of treatment options available to an individual.

Read the full answer

The provision of value-added items or services (VAIS) is a common practice, particularly for managed care organizations.

Read the full answer

Alternative treatments are treatments that are within the range of treatment options available to an individual.

Read the full answer

The provision of value-added items or services (VAIS) is a common practice, particularly for managed care organizations.

Read the full answer

Alternative treatments are treatments that are within the range of treatment options available to an individual.

Read the full answer

The provision of value-added items or services (VAIS) is a common practice, particularly for managed care organizations.

Read the full answer

Marketing, Marketing - Refill Reminders, Smaller Providers and Businesses

Yes. It is not marketing for a doctor to make a prescription refill reminder even if a third party pays for the communication.

Read the full answer

No. Communications about government and government-sponsored programs do not fall within the definition of “marketing.”

Read the full answer

Yes. It is not marketing for a doctor to make a prescription refill reminder even if a third party pays for the communication.

Read the full answer

No. Communications about government and government-sponsored programs do not fall within the definition of “marketing.”

Read the full answer

Yes. It is not marketing for a doctor to make a prescription refill reminder even if a third party pays for the communication.

Read the full answer

No. Communications about government and government-sponsored programs do not fall within the definition of “marketing.”

Read the full answer

Marketing, Smaller Providers and Businesses, Treatment, Payment, and Health Care Operations Disclosures - Smaller Providers and Businesses

No. In the specific case of face-to-face encounters, the HIPAA Privacy Rule allows health plans and their business associates to market both health and non-health insurance products to individuals.

Read the full answer

No. In the specific case of face-to-face encounters, the HIPAA Privacy Rule allows health plans and their business associates to market both health and non-health insurance products to individuals.

Read the full answer

No. In the specific case of face-to-face encounters, the HIPAA Privacy Rule allows health plans and their business associates to market both health and non-health insurance products to individuals.

Read the full answer

Marketing, Smaller Providers and Businesses, Treatment, Payment, and Health Care Operations Disclosures

The overlap among common usages of the terms “treatment,” “healthcare operations,” and “marketing” is unavoidable.

Read the full answer

The overlap among common usages of the terms “treatment,” “healthcare operations,” and “marketing” is unavoidable.

Read the full answer

The overlap among common usages of the terms “treatment,” “healthcare operations,” and “marketing” is unavoidable.

Read the full answer

Marketing

The Privacy Rule’s limitations on the use or disclosure of protected health information for marketing purposes do not exist in most States today.

Read the full answer

Under the HIPAA Privacy Rule, a covered entity can share protected health information with a telemarketer only if the covered entity has either obtained the individual’s prior written authorization to do so, or has entered into a business associate relationship with the telemarketer for the purpose of making a communication that is not marketing, such as to inform individuals about the covered entity’s own goods or services.

Read the full answer

Search HHS FAQs by questions or keywords:

Back to top
Secretary Robert F. Kennedy Jr.

Follow @SecKennedy

HHS icon

Follow @HHSGov

HHS Email updates

Receive email updates from HHS.

Subscribe

HHS Logo

HHS Headquarters

200 Independence Avenue, S.W.
Washington, D.C. 20201
Toll Free Call Center: 1-877-696-6775​

  • Contact HHS
  • Careers
  • HHS FAQs
  • Nondiscrimination Notice
  • Press Room
  • HHS Archive
  • Accessibility Statement
  • Privacy Policy
  • Budget/Performance
  • Inspector General
  • Web Site Disclaimers
  • EEO/No Fear Act
  • FOIA
  • The White House
  • USA.gov
  • Vulnerability Disclosure Policy