Overview:
ยง164.512(f)(5)
Permitted disclosure: Crime on premises
A covered entity may disclose to a law enforcement official protected health information that the covered entity believes in good faith constitutes evidence of criminal conduct that occurred on the premises of the covered entity.
Action Items:
1) Determine whether policies and procedures related to disclosures of PHI to law enforcement officials address the established performance criterion.
2) Obtain and review documentation of such a disclosure, if available. Elements to consider include, but are not limited to, documentation of:
- Whether the entity exercised professional judgment
- Whether the entity believes in good faith that there was evidence of criminal conduct that occurred on its premises.
Related Documents:
1) Policies and procedures related to disclosures of PHI to law enforcement officials address the established performance criterion.
2) Documentation of such a disclosure, if available.
Additional Guidance:
Covered entities may disclose protected health information to law enforcement officials for law enforcement purposes under the following six circumstances, and subject to specified conditions: (1) as required by law (including court orders, court-ordered warrants, subpoenas) and administrative requests; (2) to identify or locate a suspect, fugitive, material witness, or missing person; (3) in response to a law enforcement official’s request for information about a victim or suspected victim of a crime; (4) to alert law enforcement of a person’s death, if the covered entity suspects that criminal activity caused the death; (5) when a covered entity believes that protected health information is evidence of a crime that occurred on its premises; and (6) by a covered health care provider in a medical emergency not occurring on its premises, when necessary to inform law enforcement about the commission and nature of a crime, the location of the crime or crime victims, and the perpetrator of the crime.
Article ID: 531
Created: September 29, 2022
Last Updated: September 29, 2022
Author: Matthew Burdick
Online URL: http://www.compliancewiki.org/article/hipaa-privacy-disclosures-for-law-enforcement-purposes-crime-on-premises-164-512-f-5-531.html