The proposed rule would:
- allow health information to be used and shared easily for the treatment and for payment of health care;
- allow health information to be disclosed without an individual’s authorization for certain national priority purposes (such as research, public health and oversight), but only under defined circumstances;
- require written authorization for use and disclosure of health information for other purposes, and
- create a set of fair information practices to inform people of how their information is used and disclosed, ensure that they have access to information about them, and require health plans and providers to maintain administrative and physical safeguards to protect the confidentiality of health information and protect against unauthorized access.