What 45 CFR 164.502 -- Uses and disclosures of protected health information: General rules. requires
This regulation establishes the general principle that a covered entity or business associate may not use or disclose protected health information (PHI) except as explicitly permitted or required by law, and mandates applying the 'minimum necessary' standard to such uses and disclosures.
Pillar: Medical & Healthcare · Authority: U.S. Department of Health and Human Services · Version: 1.0.0 · Last updated:
Primary source: https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502
SHA-256 integrity: 6ae7a1edc82c13ca8901190c3cf4b84b68e0b539280f3625bb0a1dd34b2e9457
Primary Citations — 7 traced to source
- Article 164.502(a): A covered entity or business associate may not use or disclose protected health information, except as permitted or required by this subpart or by subpart C of part 160 of this subchapter.
- Article 164.502(b)(1): When using or disclosing protected health information or when requesting protected health information from another covered entity or business associate, a covered entity or business associate must make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose of the use, disclosure, or request.
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/us-hipaa-45-cfr-164-502-uses-disclosures-phi.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/us-hipaa-45-cfr-164-502-uses-disclosures-phi.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/us-hipaa-45-cfr-164-502-uses-disclosures-phi
- Back to registry: Browse all 10,090 compliance nodes