Which of the following types of information would an organization generally NOT be required to disclose to law enforcement?

Question

Options

• AInformation about medication errors under the Food, Drug and Cosmetic Act
• BMoney laundering information under the Bank Secrecy Act of 1970
• CInformation about workspace injuries under OSHA requirements
• DPersonal health information under the HIPAA Privacy Rule

• A
  5% (3)
• B
  10% (6)
• C
  3% (2)
• D
  81% (47)

Explanation

The HIPAA Privacy Rule generally prohibits covered entities and business associates from disclosing protected health information (PHI) to law enforcement without the individual's authorization, unless one of the exceptions in 45 CFR ?164.512 applies. These exceptions include disclosures required by law, disclosures for law enforcement purposes, disclosures about victims of abuse, neglect or domestic violence, disclosures for health oversight activities, disclosures for judicial and administrative proceedings, disclosures for research purposes, disclosures to avert a serious threat to health or safety, disclosures for specialized government functions, disclosures for workers' compensation, and disclosures to coroners and medical examiners. None of these exceptions apply to the type of information in option D, which is personal health information that is not related to any of the above purposes. Therefore, an organization would generally not be required to disclose such information to law enforcement under the HIPAA Privacy Rule.

No community discussion yet for this question.