��������Ƶ

HIPAA Privacy Rule: Primary federal regulation governing the use and disclosure of protected health information (PHI), establishing standards for patient privacy rights and authorization requirements

HIPAA Security Rule: Sets national standards for securing electronic protected health information, including technical, physical, and administrative safeguards

HIPAA Enforcement Rule: Establishes procedures for compliance and investigations, along with penalties for violations of HIPAA Privacy and Security Rules

HITECH Act: 2009 legislation that strengthens privacy and security protections for health information and strengthens the enforcement of HIPAA rules

State Privacy Laws: State-specific regulations that may impose additional or stricter requirements for health information privacy and disclosure authorization

42 CFR Part 2: Federal regulations providing additional privacy protections for substance use disorder treatment records

Plain Language Requirement: Authorization must be written in clear, understandable language avoiding complex legal terminology

PHI Description Requirement: Authorization must specifically describe what protected health information will be disclosed

Disclosure Parties Identification: Authorization must clearly identify who is authorized to disclose the information and who will receive it

Expiration Requirement: Authorization must include either an expiration date or expiration event

Revocation Rights: Authorization must include a statement explaining the individual's right to revoke the authorization

Redisclosure Notice: Authorization must include a statement that information may be subject to redisclosure by the recipient

Signature Requirements: Authorization must include the individual's signature and date of signing to be valid