NRPM: Standards for Privacy of Individually Identifiable Health Information. iv. Verification.


In § 164.518(c), we propose to require covered entities to verify the identity of most persons making requests for protected health information and, in some cases, the legal authority behind that request. For disclosures of protected health information for research purposes under this subsection, the required documentation of IRB or privacy board approval would constitute sufficient verification. No additional verification would be necessary under § 164.518(c).