The U.S. Department of Health and Human Services Office for Civil Rights (OCR) recently provided guidance for healthcare professionals concerning disclosures of protected health information (PHI) under the HIPAA Privacy Rule (the Privacy Rule) to patient spouses, relatives, and friends.
Under the Privacy Rule, a covered entity may “share [PHI] with an individual’s family member, other