Uses and disclosures for which an authorization is required., 45 CFR 164.508

Summary

Standard: Authorizations for uses and disclosures —

Authorization required: General rule. Except as otherwise permitted or required by this subchapter, a covered entity may not use or disclose protected health information without an authorization that is valid under this section. When a covered entity obtains or receives a valid authorization for its use or disclosure of protected health information, such use or disclosure must be consistent with such authorization.

Authorization required: Psychotherapy notes. Notwithstanding any provision of this subpart, other than the transition provisions in § 164.532, a covered entity must obtain an authorization for any use or disclosure of psychotherapy notes, except:

To carry out the following treatment, payment, or health care operations:

Use by the originator of the psychotherapy notes for treatment;

Use or disclosure by the covered entity for its own training programs in which students, trainees, or practitioners in ...