NRPM: Standards for Privacy of Individually Identifiable Health Information. 2. Use and disclosure for health oversight activities. (§ 164.510(c))


In section § 164.510(c), we propose to allow covered entities to disclose protected health information to public oversight agencies (and to private entities acting on behalf of such agencies) without individual authorization, for health oversight activities authorized by law. In cases in which a covered entity is also an oversight agency, it would be permitted to use protected health information in all cases in which it would be permitted to disclose such information for health oversight activities under this section.