NRPM: Standards for Privacy of Individually Identifiable Health Information. c. Permitted recipients of disclosures for public health activities.


Disclosures without individual authorization for public health activities would be permitted to be made to only three types of persons: public health authorities, non- governmental entities authorized by law to carry out public health activities, and persons who may be at risk of contracting or spreading a disease, if other law authorizes notification.