The javascript used on this site for creative design effects is not supported by your browser. Please note that this will not affect access to the content on this web site.
Skip Navigation
H H S Department of Health and Human Services
U.S. Department of Health and Human Services
Health Information Technology and Quality

A-Z Index  |  Questions?  |  Order Publications  |  HRSA Mobile


When and what information can a covered entity use or disclose PHI without a patient's authorization?

When must a covered entity obtain a patient's authorization to use or disclose PHI?
What needs to be included in an authorization?
What is a "notice of privacy practices" and what does it need to include?

What are the administrative requirements that covered entities need to have in place under HIPAA to protect the privacy of PHI?

What policies and procedures need to be in place to restrict access, uses, and disclosures of PHI?

Developed by the Health Resources and Services Administration as a resource for health centers and other safety net and ambulatory care providers who are seeking to implement health IT.
Health Information Technology Toolboxes help health centers, safety net providers, and ambulatory care providers with electronic and online resources and technical assistance to improve patient care.  More>
Stay Informed