What are the HIPAA Rules on the Sale of PHI?

Modified on Tue, 22 Jul at 3:13 PM


DISCLAIMER: The information provided in this article, other knowledge base articles, and the Compliancy Group website do not, and are not intended to, constitute legal advice; instead, all information, content, and materials in the Knowledge Base and on the Compliancy Group website are for general informational purposes only.  

Introduction

This article discusses what constitutes a sale of PHI, the exceptions to this definition, and the rules regarding sale of PHI. 

What Constitutes a Sale of PHI? 

Under the HIPAA Privacy Rule, a sale of PHI is a disclosure of protected health information by a covered entity or business associate, if applicable, where the covered entity or business associate directly or indirectly receives remuneration from or on behalf of the recipient of the protected health information in exchange for the protected health information.

Remuneration includes money (e.g., cash, checks), and also includes and non-financial, or "in-kind", compensation.  Non-financial remuneration includes goods, services, or other benefits. For example, the use of supplies, computers, or other materials in exchange for PHI would constitute remuneration

Does the Sale of PHI Require Patient Authorization?


Generally, a covered entity must obtain an authorization for any disclosure of PHI that is a sale of PHI. Generally, the authorization must state that the disclosure will result in remuneration to the covered entity.

Generally, a covered entity may not refuse to treat a patient solely because the patient refuses to provide an authorization permitting the covered entity to engage in sale of PHI. In other words, treatment cannot be made dependent on authorizing the sale of PHI. 

Are There Exceptions To The Definition of "Sale of PHI"?

Under the Privacy Rule, the term “sale of protected health information” does not include disclosure of protected health information:

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article