Privacy: Know These PHI Disclosure Essentials

Why This Topic Matters

Privacy practices can change operationally during emergencies, but HIPAA obligations do not disappear. Understanding the general boundaries of permitted disclosures helps organizations respond to public health needs while continuing to protect patient privacy.

Article Sections

1. Emergency Privacy Reminder

   Introduces the article’s focus on privacy policy review during emergency situations, natural disasters, and disease outbreaks. It frames the discussion around public health emergency conditions and patient privacy obligations.

2. HHS Public Health Emergency and OCR Bulletin

   Summarizes the public health emergency context and the federal privacy guidance issued in response. It covers the general relationship between the emergency declaration, HIPAA, and OCR’s clarification of privacy expectations.

3. When PHI May Be Shared Without Authorization

   Outlines the broad categories of circumstances discussed in the guidance where disclosures may be permitted without patient authorization. The section groups the discussion around treatment, public health activities, family and friends, and imminent threat situations.

4. Caution on Patient Privacy

   Highlights the reminder that emergency-related public health reporting does not eliminate privacy protections. It reinforces that confidentiality considerations still apply even when disclosures are allowed in limited circumstances.