I am looking for some further information regarding Business Associate and/or a Covered Entity with accessing a Mental Health's patients PHI. Does anyone know if DCFS or CPS fall into either category allowing Mental Health information to be release without an ROI? At this time I am unable to find anything that states this can be released without an ROI specifically to these departments.... If anyone can help answer this question regarding CPS or DCFS i would greatly appreciate it.