204-Are covered entities required to document incidental disclosures in an accounting of disclosures

Are covered entities required to document incidental disclosures permitted by the HIPAA Privacy Rule, in an accounting of disclosures provided to an individual?

Answer:

No. The Privacy Rule includes a specific exception from the accounting standard for incidental disclosures permitted by the Rule. See 45 CFR 164.528, links to an external website(a)(1).

Created 12/19/2002

Content created by Office for Civil Rights (OCR)
Content last reviewed December 28, 2022

Are covered entities required to document incidental disclosures permitted by the HIPAA Privacy Rule, in an accounting of disclosures provided to an individual?

Answer:

Subscribe to Email Updates