Content created by Office for Civil Rights (OCR)
Is there a signed authorization permitting the disclosure?
No, there is not a signed authorization from the individual!
The disclosure may not be made if the Rule does not otherwise permit the disclosure!
The covered entity must obtain individual authorization, unless the disclosure is otherwise permitted by another provision of the Privacy Rule. See decision tool questions for a discussion of permitted disclosures for treatment and public health purposes.
Authorization must meet all requirements in the Privacy Rule to be valid
Minimum necessary does not apply