Standards for Privacy of Individually Identifiable Health Information. Final Privacy Rule Preamble.. Section 164.506 - Consent for Treatment, Payment, and Health Care Operations


Except in certain circumstances, a covered health care provider that has a direct treatment relationship must obtain an individual's consent for use or disclosure of protected health information for treatment, payment, or health care operations. While this requirement is subject to the PRA, we believe that the burden associated with this requirement is exempt from the PRA as stipulated under 5 CFR 1320.3(b)(2).