Standards for Privacy of Individually Identifiable Health Information. Final Privacy Rule Preamble.. Section 164.514 - Other Procedural Requirements Relating to Uses and Disclosures of Protected Health Information


Prior to any disclosure permitted by this subpart, a covered entity must verify the identity and authority of persons requesting protected health information, if the identity or authority of such person is not known to the covered entity, and obtain any documentation, statements, or representations from the person requesting the protected health information that is required as a condition of the disclosure. In addition, a covered entity must retain any signed consent pursuant to § 164.506 and any signed authorization pursuant to § 164.508 for documentation purposes as required by § 164.530(j). This requirement is exempt from the PRA as stipulated under 5 CFR 1320.4(a)(1) and (a)(2).