HIPAA allows us to use or disclose PHI without your written authorization for specific purposes related to your care and legal obligations. The most common reasons include:
Treatment
We share PHI with healthcare professionals involved in your care. For example, a nurse practitioner may consult with your therapist to coordinate treatment.
Payment
We use PHI to bill for services and collect payment from you, your insurance company, or other responsible parties. We may also send insurers details about the care you received.
Healthcare Operations
We use PHI to manage our practice and improve quality, including internal reviews, staff training, accreditation activities, and customer service.
Business Associates
We may share PHI with outside companies (billing, transcription, IT) that assist us in running the practice. These partners must sign agreements requiring them to protect your PHI.
Health Information Exchanges
If we participate in an electronic health exchange, we may share PHI with other authorized providers to coordinate care.
Family, Friends, & Caregivers
With your permission—or when allowed by law—we may share PHI with family members or others involved in your care or payment for care.
Public Health & Safety
We may disclose PHI when required by law for public health purposes, such as reporting communicable diseases, suspected abuse, or preventing serious threats to a person's health or safety.
Health Oversight Activities
We may provide PHI to agencies authorized to oversee the healthcare system, such as licensing boards or government auditors.
Legal Requirements
We may disclose PHI when required by federal, state, or local law.