HIGHLIGHTS

When a HIPAA covered entity or business associate receives a request for protected health information (PHI) potentially related to reproductive health care, it must obtain a signed attestation that clearly states the requested use or disclosure.

Admitted Purposes:

  • Health oversight activities
  • Judicial or administrative proceedings
  • Law enforcement
  • Regarding decedents, disclosures to coroners and medical examiners

Prohibited Purposes:

  • To conduct a criminal, civil, or administrative investigation into any person for the mere act of seeking, obtaining, providing, or facilitating lawful reproductive health care.
  • To impose criminal, civil, or administrative liability on any person for the mere act of seeking, obtaining, providing, or facilitating lawful reproductive health care.
  • To identify any person for any purpose described above.

CLICK HERE to read the entire attestation.