Are covered entities required to document incidental disclosures permitted by the HIPAA Privacy Rule, in an accounting of disclosures provided to an individual?

Answer:

No. The Privacy Rule includes a specific exception from the accounting standard for incidental disclosures permitted by the Rule. See 45 CFR 164.528(a)(1).

 

 

Created 12/19/2002

Content created by Office for Civil Rights (OCR)
Content last reviewed on July 26, 2013