164.506    
5. TREATMENT, PAYMENT AND HEALTH CARE OPERATIONS (TPO)

164.506(a)
   
5.1.
CE may use or disclose PHI for TPO set forth in ¶ 5.1.2., provided that such use or disclosure is consistent with other applicable requirement of these privacy rules.
164.506(b)    
 
5.1.1.
Standard: Consent
5.1.1.1.
A CE may obtain consent of the individual to use or disclose PHI to carry out TPO.
5.1.1.2.
Consent shall not be effective when an authorization is required or when another condition must be met for such use and disclosure to be permissible under the Privacy Rules.

164.506(c)
   
5.1.2.
Implementation: TPO
5.1.2.1.
CE may use or disclose PHI for its own TPO.
5.1.2.2.
CE may disclose PHI for treatment activities of a provider.
5.1.2.3.
CE may disclose PHI to another CE or provider for the payment activities of an entity that receives the information.
5.1.2.4.
CE may disclose PHI to another CE for health care operations activities of the entity that receives the information, if each entity either has or had a relationship with the individual who is the subject of the PHI being requested, the PHI pertains to such relationship, and the disclosure is:
5.1.2.4.1.
for the purposes listed in ¶ 1.14.1, 1.14.2 ; or
5.1.2.4.2.
for the purpose of health care fraud and abuse detection or compliance.
5.1.2.5.
CE that participates in an organized health care arrangement may disclose PHI about an individual to another CE that participates in the organized health arrangement for any health care operations activities of the organized health care arrangement.
     
     

Table of Contents
| Index | HIPAA Statewide Project