Confidentiality relates to disclosure or nondisclosure of information. Historically a duty to honor confidentiality has arisen with respect to information disclosed in the context of a confidential relationship, such as that between an individual and his or her physician, attorney, or priest.

THIS INFORMATION WILL BE KEPT CONFIDENTIAL AND ON FILE AT THE CALIFORNIA DEPARTMENT OF PUBLIC HEALTH, PRIVACY OFFICE.

The Privacy Rule protects all "individually identifiable health information" held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper, or oral. The Privacy Rule calls this information "protected health information (PHI)."

The Health Insurance Portability and Accountability Act (HIPAA) lays out three rules for protecting patient health information, namely: The Privacy Rule. The Security Rule. The Breach Notification Rule.

Your health information cannot be used or shared without your written permission unless this law allows it. For example, without your authorization, your provider generally cannot: Give your information to your employer. Use or share your information for marketing or advertising purposes or sell your information.

The Security Rule protects a subset of information covered by the Privacy Rule, which is all individually identifiable health information a covered entity creates, receives, maintains or transmits in electronic form. The Security Rule calls this information "electronic protected health information" (e-PHI).

Use and disclosure for personal purposes, or to benefit someone other than the patient and the BU Covered Component, is prohibited. For example: Workforce members may not post any information, photos, videos or anything else about a patient on social media; and.