204-Are covered entities required to document incidental disclosures in an accounting of disclosures

Are covered entities required to document incidental disclosures permitted by the HIPAA Privacy Rule, in an accounting of disclosures provided to an individual?

Answer:

No. The Privacy Rule includes a specific exception from the accounting standard for incidental disclosures permitted by the Rule. See 45 CFR 164.528(a)(1).

Created 12/19/2002

Content created by Office for Civil Rights (OCR)
Content last reviewed December 28, 2022

Are covered entities required to document incidental disclosures permitted by the HIPAA Privacy Rule, in an accounting of disclosures provided to an individual?

Answer:

Sign Up for Email Updates