In general, the HIPAA privacy rule gives individuals the right to request a restriction on uses and disclosures of protected health information (PHI). The individual is also provided the right to request confidential communication or that a communication of PHI be made
by an alternative means; such as sending correspondence to the individual’s office instead of the individual’s home. The privacy rule generally requires healthcare providers to take reasonable steps to limit use or disclosure of any requests for PHI to the minimum
necessary to accomplish the intended purpose. These provisions do not apply to uses or disclosures made pursuant to an authorization requested by the individual. Healthcare entities must keep records of PHI disclosures within your records, if completed properly, will constitute an adequate record.
Note: Uses and disclosures for TPO may be permitted without prior consent in an emergency.