HIPAA FAQs - Restriction on Use

    


 
Can a patient restrict the use or disclosure of his/her protected health information (PHI)?
A patient has the right to REQUEST that the use and disclosure of his/her PHI be restricted for treatment, payment, and health care operations (TPO) as well as restricting disclosure to only certain people, such as certain family members only.

YOU DO NOT HAVE TO AGREE TO THE PATIENT’S REQUEST. Your patient’s restriction request must be in writing, be specific as to what information is covered by this request, whether it covers use, disclosure, or both, and to whom these limitations apply.

If your practice agrees to the request, it must honor the request except when overriding laws or emergencies apply.