NRPM: Standards for Privacy of Individually Identifiable Health Information. 11. Minimum Necessary. (§164.506(b))


When using or disclosing protected health information for treatment, payment, healthcare operations, and other purposes, an entity would be required to disclose only the amount of protected health information necessary to accomplish the intended purpose of the use or disclosure.