A. If the records were consulted or reviewed for treatment purposes and placed in the patient’s chart, they are now considered a part of the designated record set. Assuming it is a permissible disclosure, the HIPAA Privacy Rule permits a provider who is a covered entity to disclose a complete health record, even though portions of the record may have been created by other providers. For more information on the general rules of permitted uses and disclosures of protected health information, see 45 C.F.R. 165.502.
Yolanda Sims, JD, MHA
KAMMCO Loss Prevention & Risk Management Advisor