Business Associates
If are not a healthcare provider but you do business with one, you may be a Business Associate.




  

Written Authorization

A patients’ written authorization is required before the use or disclosure of health care information that is not for a "permissible purpose." Generally, this is information received for a purpose that is not treatment, payment or health care operations. For example, a written authorization is needed before a patient’s health information can be included on a list for marketing purposes. Unlike consents, a health care provider cannot refuse treatment if an authorization is not provided or is revoked.
Legislation Files Containing This Term:
legislation/45CFR-164.520.html

© 2002,2003 HIPAA PS