special subjects
Confidentiality and HIPAA
Limits on use of protected health information (PHI)
HIPAA limits how health care providers may use PHI. The act does not restrict physicians, nurses, and other health care professionals from sharing information needed to treat their patients. Disclosures to health information exchanges and public health agencies for public health purposes during events such as the COVID-19 pandemic are also permissible disclosures under guidelines of the Office for Civil Rights in the U.S. Department of Health and Human Services. However, health care professionals may use or share only the minimum amount of protected information needed for a particular purpose. In most situations, PHI may not be used for purposes unrelated to health care. For example, a patient must sign a specific authorization before a health care provider can release medical information to a life insurer, a bank, a marketing firm, or another outside business for purposes unrelated to the patient’s current health care needs. 