NOTE: The privacy rule generally requires healthcare providers to take reasonable steps to limit the use of, disclosure of, and request for PHI (Private Health Information) to the minimum necessary to accomplish the intended purpose.
These provisions do not apply to uses or disclosures made pursuant to an authorization requested by the individual.
Healthcare entities must keep records of PHI disclosures. Information provided here if completed properly, will
constitute an adequate record.