NRPM: Standards for Privacy of Individually Identifiable Health Information. 14. Verification. (§164.518(c)(2))


Entities would be required to have reasonable procedures to verify the identity or authority, as applicable, of persons requesting the disclosure of protected health information if the person making the request is not already known to the entity. In most cases, the covered entity could simply ask for a form of identification like a drivers license.