Skip to main content
U.S. flag

An official website of the United States government

Return to Search

Disclosures for Emergency Preparedness - A Decision Tool: Source is Not a Covered Entity

This is an Emergency Preparedness Decision Tool used if the source of the information is not a Covered Entity


Issued by: Office for Civil Rights (OCR)

Issue Date: July 07, 1905

Disclosures for Emergency Preparedness - A Decision Tool: Source is Not a Covered Entity

NO, the source of the information is not a covered entity.

Handing over a folder

The disclosure may be made. The Privacy Rule applies only to covered entities!


  • The Privacy Rule does not apply to all persons or entities that regularly use, disclose, or store individually identifiable health information.
  • For example, the Privacy Rule does not limit the disclosure of information by social service agencies, Centers for Independent Living, paratransit authorities, Protection & Advocacy Organizations or public agencies that perform public health activities, when those agencies are functioning solely in these capacities. If an agency also performs covered entity functions, see discussion of hybrid entities.
  • Example: A social services agency (that is not a covered entity) that maintains a list of names, addresses and limitations of persons with disabilities in an area may release the information to a transportation contractor without regard to the HIPAA Privacy Rule.
  • Example: The HIPAA Privacy Rule does not restrict the American Red Cross from sharing patient information.

HHS is committed to making its websites and documents accessible to the widest possible audience, including individuals with disabilities. We are in the process of retroactively making some documents accessible. If you need assistance accessing an accessible version of this document, please reach out to the

DISCLAIMER: The contents of this database lack the force and effect of law, except as authorized by law (including Medicare Advantage Rate Announcements and Advance Notices) or as specifically incorporated into a contract. The Department may not cite, use, or rely on any guidance that is not posted on the guidance repository, except to establish historical facts.