• Subject Matter: Confidentiality requirements
  • Jurisdiction: Federal
  • Citations: 42 CFR § 164 et seq.
  • Summary: Federal law, often referred to as HIPAA, which governs the confidentiality of medical records held by certain types of providers called covered entities. HIPAA contains sections related to security standards, privacy, and breach reporting. The privacy section sets forth permissible uses and disclosures of protected health information, including the circumstances that disclosures are required or are permitted without patient consent.
  • Additional Resources: https://www.hhs.gov/hipaa/index.html