Protected health information (PHI) cannot be shared under HIPAA. So what exactly is considered PHI ing to HIPAA? It's information that can identify a particular patient, including health records, lab reports, bills, or even verbal conversations.
Your doctor, insurance company, and other healthcare providers have to ask for your written permission before they can release your personal health information. This is true unless the release is for the purpose of treatment, payment, or healthcare operations.
A description of the information that will be used/disclosed. The purpose for which the information will be disclosed. The name of the person or entity to whom the information will be disclosed. An expiration date or expiration event when consent to use/disclose the information is withdrawn.
A covered entity is permitted, but not required, to use and disclose protected health information, without an individual's authorization, for the following purposes or situations: (1) To the Individual (unless required for access or accounting of disclosures); (2) Treatment, Payment, and Health Care Operations; (3) ...