Individuals have the right to request that your practice restrict certain:
- Uses and disclosures of PHI for treatment, payment, and health care operations
- Disclosures to persons involved in the individual’s health care or payment for health care
- Disclosures to notify family members or others about the individual’s general condition, location, or death
If your patient (or another person on behalf of the individual) has fully paid out-of-pocket for a service or item and also requests that the PHI not be disclosed to his/her health plan, your practice cannot disclose the PHI to a health plan for payment or health care operations. You should implement policies and procedures that ensure this directive can be carried out.