HIPAA Privacy Regulations: General Rules for Uses and Disclosures of Protected Health Information -- Uses and Disclosures Consistent With Notice - § 164.502(i)
As Contained in the HHS Final HIPAA Privacy Rules
HHS Regulations |
Standard: uses and disclosures consistent with notice. A covered entity that is required by § 164.520 to have a notice may not use or disclose protected health information in a manner inconsistent with such notice. A covered entity that is required by § 164.520(b)(1)(iii) to include a specific statement in its notice if it intends to engage in an activity listed in § 164.520(b)(1)(iii)(A)-(C), may not use or disclose protected health information for such activities, unless the required statement is included in the notice.
HHS Description General Rules for Uses and Disclosures of Protected Health Information -- Uses and Disclosures Consistent With Notice |
We proposed to prohibit covered entities from using or disclosing protected health information in a manner inconsistent with their notice of information practices. We retain this provision in the final rule. See § 164.520 regarding notice content and distribution requirements.
HHS Response to Comments Received General Rules for Uses and Disclosures of Protected Health Information -- Uses and Disclosures Consistent With Notice |
Comments on the notice requirements are addressed in the preamble to § 164.520