§ 164.506 Use and disclosures to carry out treatment, payment, or health care operations.

§ 164.506 Consent for uses or disclosures to carry out treatment, payment, or health care operations.

[See AIS Side-By-Side, "Consent" for (a) and (b)]

[§ 164.506, Consent for uses or disclosures to carry out treatment, payment, or health care operations, deleted in its entirety]

(c) Implementation specifications: Treatment, payment, or health care operations.

(1) A covered entity may use or disclose protected health information for its own treatment, payment, or health care operations.

(2) A covered entity may disclose protected health information for treatment activities of another health care provider.

(3) A covered entity may disclose protected health information to another covered entity or health care provider for the payment activities of the entity that receives the information.

(4) A covered entity may disclose protected health information to another covered entity for health care operations activities of the entity that receives the information, if both entities have a relationship with the individual who is the subject of the protected health information being requested, and the disclosure is:

(i) For a purpose listed in paragraph (1) or (2) of the definition of health care operations; or

(ii) For the purpose of health care fraud and abuse detection or compliance.

(5) A covered entity that participates in an organized health care arrangement may disclose protected health information about an individual to another covered entity that participates in the organized health care arrangement for any health care operations activities of the organized health care arrangement.

 [new provisions]