HHS FAQs clarify health information disclosure rules

New detail confirms that patient information under HIPAA can be shared by health providers and also reaffirms broad data access rights by patients.

In a recently published FAQ, the Department of Health and Human Services Office of Civil Rights (HHS OCR), clarified that under the HIPAA Privacy Rule covered health care providers may disclose protected health information (PHI) to value-based care organizations, which are compensated for patient health outcomes rather than volume of

Free Trial

Register for free to keep reading.

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Regular podcasts from trusted external experts
  • Fresh compliance and regulatory content every day
Register for free Already a member? Sign in