Follow HIPAA rules when you receive employment-related requests
Keep HIPAA compliance front-of-mind when a patient asks you to send their records to an employer. In particular, your practice should understand when you do and do not need a patient’s authorization to disclose protected health information (PHI) in response to an employment-related request.
To read the full article, sign in and subscribe to the DecisionHealth Newsletters.