Free HIO-201 HIPAA Updates

A covered entity must obtain an authorization for any use or disclosure of protected health information for marketing, except if the communication is in the form allowed by the regulations.

A face-to-face communication made by a covered entity to an individual is allowed by the regulations without an authorization

A promotional gift of nominal value provided by the covered entity is NOT allowed by the regulations without an authorization.

If the marketing is expected to result in direct or indirect remuneration to the covered entity from a third party, the authorization must state that such remuneration is expected

Disclosure of PHI for marketing purposes is limited to disclosure to business associates (which could be a telemarketer) that undertakes marketing activities on behalf of the covered entity

The types of financial information to be disclosed.

The specific individuals or entities to which disclosure would be made.

The types of persons who would receive PHI.

The conditions that would not apply to disclosure of PHI

The criteria for reviewing requests for routine disclosure of PHI.

837.

820.

277.

835.

278.

Data group

Segment

Transaction set

Functional group

Interchange envelope