1900. Use or disclosure of a patient’s protected health information
(PHI) without the patient’s authorization is
permitted for the following purposes:
1. To treat the patient even though the patient is not having
an emergency.
2. To get payment from the patient’s insurance
3. Research Activities.
4. To perform certain administrative, fi nancial, legal, and
quality improvement activities.
1900. Answer: E (All)
Explanation:
Providers may use or disclose a patient’s PHI without the
patient’s authorization to treat the patient even though the
patient is not having an emergency, to get payment from
the patient’s insurance; or to perform certain
administrative, fi nancial, legal, and quality improvement
activities.
To avoid interfering with an individual’s access to quality
health care or the effi cient payment for such health care,
the Privacy Rule permits a covered entity to use and disclose protected health information, with certain limits
and protections, for treatment, payment, and health care
operations activities.” Most administrative, fi nancial,
legal, and quality improvement activities are considered to
be health care operations
Treatment’ generally means the provision, coordination, or
management of health care and related services among
health care providers or by a health care provider with a
third party, consultation between health care providers
regarding a patient, or the referral of a patient from one
health care provider to another.
Health care operations’ including administrative, fi nancial,
legal, and quality improvement activities of a covered
entity that are necessary to run its business and to support
the core functions of treatment and payment
Covered Entities may use or disclose PHI without patient
authorization if the covered entity has fi rst obtained
waiver from an IRB as long as the waiver complies with
the specifi cations contained in the Privacy Rule