Click on a question below to view its answer and related information.

• Can a patient ask to have their health related communications handled in a confidential manner?
  
  
• What is the requirement for an authorization?
  
  
• Are there specific elements that must be in an authorization to make it valid?
  
  
  • Is there a requirement about language?
    
    
  • Can an authorization be verbal?
    
    
  • Can we accept a copy of an authorization instead of the original?
    
    
  • Is there a requirement to verify the identity of the individual signing the authorization?
    
    
  • Are there any special requirements to revoke an authorization?
    
    
  • Are there special requirements for authorization for research purposes?
    
    
  • Is there any easier way to obtain authorization for research purposes?
    
    
  • Are there any exceptions to the requirement for an authorization for disclosure for marketing purposes?

Related Resources and Documents:

Final Standards for Privacy of Individually Identifiable Health Information. §164.528 Accounting of Disclosures of Protected Health Information. (HIPAAdvisory)
http://www.hipaadvisory.com/regs/finalprivacy/528.htm

Office of Civil Rights Guidance Tool on HIPAA
http://www.hhs.gov/ocr/hipaa/privacy.html

Confidential Communications Request Form

Authorization Form Sample (added 4/11/03)

Authorization Form Policy

Confidential Communications Policy