Guidance: Restrictions on Government Access to Health Information
This page provides guidance on Restrictions on Government Access to Health Information under HIPAA.
Final
Issued by: Office for Civil Rights (OCR)
Restrictions on Government Access to Health Information
45 CFR Part 160, Subpart C; 164.512(f) (Download a copy in PDF - PDF)
Background
Under the HIPAA Privacy Rule, government-operated health plans and health care providers must meet substantially the same requirements as private ones for protecting the privacy of individual identifiable health information. For instance, government-run health plans, such as Medicare and Medicaid plans, must take virtually the same steps to protect the claims and health information that they receive from beneficiaries as private insurance plans or health maintenance organizations (HMO). In addition, all Federal agencies must also meet the requirements of the Privacy Act of 1974, which restricts what information about individual citizens – including any personal health information – can be shared with other agencies and with the public.
The only new authority for government involves enforcement of the protections in the Privacy Rule itself. To ensure that covered entities protect patients’ privacy as required, the Rule requires that health plans, hospitals, and other covered entities cooperate with efforts by the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) to investigate complaints or otherwise ensure compliance.
For more information, please review our Frequently Asked Questions about the Privacy Rule.
OCR HIPAA Privacy
December 3, 2002 Revised April 3, 2003
Significant Aspects of the Privacy Rule
- Introduction
- General Overview
- Incidental Uses and Disclosures
- Minimum Necessary
- Personal Representatives
- Business Associates
- Uses and Disclosures for Treatment, Payment, and Health Care Operations
- Marketing
- Public Health
- Research
- Workers' Compensation Laws
- Notice
- Government Access
- Decedents
- Student Immunization
- Marketing: Refill Reminders
Frequently Asked Questions for Professionals - Please see the HIPAA FAQs for additional guidance on health information privacy topics.
HHS is committed to making its websites and documents accessible to the widest possible audience, including individuals with disabilities. We are in the process of retroactively making some documents accessible. If you need assistance accessing an accessible version of this document, please reach out to the guidance@hhs.gov.
DISCLAIMER: The contents of this database lack the force and effect of law, except as authorized by law (including Medicare Advantage Rate Announcements and Advance Notices) or as specifically incorporated into a contract. The Department may not cite, use, or rely on any guidance that is not posted on the guidance repository, except to establish historical facts.