Nov 12th, 2014
Under the HIPAA Privacy Rule, covered entities and business associates (BA) may disclose patients’ protected health information (PHI) without a signed authorization for treatment, payment, or healthcare operations (TPO) reasons. Examples include: Doctors and/or hospitals (that are covered entities) may share information with one another for treatment reasons. Patients’ information may also be relea...