Reference:USA 45 CFR Part 160 09-Apr-2025 § 164.508
From GxPlex
Document Information
| Document information | |
|---|---|
| Reference | USA 45 CFR Part 160 09-Apr-2025 |
| Validity area | USA |
| Scope(s) | G |
| Document name | 45 CFR Part 160 |
| Version / Revision | 09-Apr-2025 |
| Status | Current |
| Document type | Legal act |
| Language(s) | EN |
| Description | Title 45—Public Welfare
Subtitle A—Department of Health and Human Services Subchapter C—Administrative Data Standards and Related Requirements Part 164 Security and Privacy https://www.ecfr.gov/current/title-45 |
| Official source | Official link |
| Restricted access | No |
| Submitted by | Florian Adragna |
| Contributors | |
Reference Details
| Scope | G |
|---|---|
| Document part | § 164.508 |
| Language | EN |
| Original entry by | Florian Adragna |
| Contributors | |
| Tags (EN) | |
| Tags (original language) | |
| Tags (FR) | |
| Comment | Processing of health data is not allowed, with exceptions |
Text
§ 164.508 Uses and disclosures for which an authorization is required. (a) Standard: Authorizations for uses and disclosures — (1) Authorization required: General rule. Except as otherwise permitted or required by this subchapter, a covered entity may not use or disclose protected health information without an authorization that is valid under this section. When a covered entity obtains or receives a valid authorization for its use or disclosure of protected health information, such use or disclosure must be consistent with such authorization. […] (3) Plain language requirement. The authorization must be written in plain language.
(4) Copy to the individual. If a covered entity seeks an authorization from an individual for a use or disclosure of protected health information, the covered entity must provide the individual with a copy of the signed authorization.
