General Rules (Privacy)

Overview:§164.502(h)Standard: Confidential communications:A covered health care provider or health plan must comply with the applicable requirements of §164.522(b) in communicating protected health information. §164.522(b)(1)Standard: Confidential... Read More

Overview:§164.502(f)Standard: Deceased individuals:A covered entity must comply with the requirements of this subpart with respect to the protected health information of a deceased individual for a period of 50 years following the death of the... Read More

Overview:§164.502(j)(1)Disclosures by whistleblowers:A covered entity is not considered to have violated the requirements of this subpart if a member of its workforce or a business associate discloses protected health information, provided that: (i)... Read More

Overview:§164.502(j)(2)Disclosures by workforce members who are victims of a crime:A covered entity is not considered to have violated the requirements of this subpart if a member of its workforce who is the victim of a criminal act discloses... Read More

Overview:§164.502(g)(1)Standard: Personal representatives:As specified in this paragraph, a covered entity must, except as provided in paragraphs (g)(3) and (g)(5) of this section, treat a personal representative as the individual for purposes of... Read More

Overview:§ 164.502(a)(5)(i)Use and disclosure of genetic information for underwriting purposes:Notwithstanding any other provision of this subpart, a health plan, excluding an issuer of a long-term care policy falling within paragraph (1)(viii) of... Read More

Overview:§164.502(i)Standard: Uses and disclosures consistent with notice:A covered entity that is required by §164.520 to have a notice may not use or disclose protected health information in a manner inconsistent with such notice. A covered... Read More