title: HIPAA Privacy Rules: protecting patient information requested through discovery, subpoenas and court orders.
abstract: Health plans routinely receive requests for patient health care information in lawsuits and administrative proceedings, whether through court order, subpoena, discovery requests or otherwise. The HIPAA Privacy Rules describe what protections a health plan must obtain before disclosing patient health information without prior authorization. This article focuses on the regulatory framework governing health plans, a review of recent case law applying these HIPAA regulations and a practical guide for how a health plan may proceed upon receiving requests for disclosure.
authors.forename: Patricia
authors.initials: P
authors.lastname: Arzuaga
mesh_terms: D003219:Confidentiality / Q000331:legislation & jurisprudence*; D020408:Health Insurance Portability and Accountability Act; D006801:Humans; D007348:Insurance, Health / Q000331:legislation & jurisprudence; D016347:Medical Records Systems, Computerized / Q000331:legislation & jurisprudence*; D014481:United States