HIPAA Training Course

Page 9 of 10

DO NOT SHARE

When PHI Cannot Be Shared:
• Except in the situtations noted previously, PHI cannot be shared unless the individual has given written authorization for use or disclosure. An authorization must be written in specific terms, such as who the authorization is for, how long the authorization is valid, and for what purposes.
• In general, without written permission, anyone who seeks an individual's PHI in person, by phone, email, or fax should be denied.