Skip to main content
U.S. flag

An official website of the United States government

HHS Guidance Submissions

Search HHS Guidance Documents

 

Filter Guidance Documents by ...

HHS Guidance Documents
Title OpDiv/StaffDiv Sort descending Guidance Status Issue Date
FAQ 2068 If an individual requests access from a clinical laboratory to a test report on the individual, is the laboratory required to interpret the test results for the individual?  Office for Civil Rights (OCR) Final
FAQ 2069 Under HIPAA, when can a family member of an individual access the individual’s PHI from a health care provider or health plan?  Office for Civil Rights (OCR) Final
FAQ 207 How are covered entities expected to determine what is the minimum necessary information that can be used, disclosed, or requested for a particular purpose?   Office for Civil Rights (OCR) Final
FAQ 2070 May a covered entity accept standing requests from individuals to access their PHI or to have their PHI sent to a third party of their choice?  Office for Civil Rights (OCR) Final
FAQ 2072 May a HIPAA covered entity or its business associate disclose protected health information (PHI) for purposes of cybersecurity information-sharing of cyber threat indicators?  Office for Civil Rights (OCR) Final
FAQ 2073 May a covered entity collect, use, and disclose criminal justice data under HIPAA?  Office for Civil Rights (OCR) Final
FAQ 2074 May a business associate of a HIPAA covered entity block or terminate access by the covered entity to the protected health information (PHI) maintained by the business associate for or on behalf of the covered entity?  Office for Civil Rights (OCR) Final
FAQ 2075 May a HIPAA covered entity or business associate use a cloud service to store or process ePHI?  Office for Civil Rights (OCR) Final
FAQ 2076 If a CSP stores only encrypted ePHI and does not have a decryption key, is it a HIPAA business associate?  Office for Civil Rights (OCR) Final
FAQ 2077 Can a CSP be considered to be a “conduit” like the postal service, and, therefore, not a business associate that must comply with the HIPAA Rules?  Office for Civil Rights (OCR) Final
This Guidance Portal contains 50210 documents.

Petition Submissions

To submit a petition to HHS, please send your petition to Good.Guidance@hhs.gov

CDC

CMS

* This PDF is not Section 508 compliant. Assistive Technology users should contact good.guidance@hhs.gov if they experience any difficulties.