Managing a patient's right to request restrictions of disclosures to health plans

摘要

SINCE ITS INITIAL adoption, the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule has granted individuals the right to request restrictions regarding the use and disclosure of their protected health information (PHI) for treatment, payment, and healthcare operations (TPO). The law also grants individuals the right to request restrictions for other disclosures, such as those made to family members. It is up to the covered entities (CEs) to determine whether or not to accept or deny such restriction requests.