[et_pb_section fb_built=”1″ _builder_version=”4.27.4″ _module_preset=”default” background_color=”#000a23″ background_image=”https:\/\/ehitoolkit.cste.org\/wp-content\/uploads\/2025\/10\/GettyImages-1274989544-scaled.jpg” parallax=”on” background_enable_video_mp4=”off” custom_margin=”-23px|||||” custom_padding=”0px||0px||true|false” border_radii=”off|||15px|15px” box_shadow_style=”preset3″ global_colors_info=”{}”][et_pb_row use_custom_gutter=”on” gutter_width=”1″ make_equal=”on” _builder_version=”4.27.4″ _module_preset=”default” background_color=”rgba(0,10,35,0.64)” width=”100%” max_width=”100%” custom_margin=”0px|auto||auto|false|false” custom_padding=”144px||374px||false|false” custom_css_main_element=”align-items:flex-end;” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.24.2″ _module_preset=”default” global_colors_info=”{}”][dipi_dual_heading second_heading=”HIPAA FAQs” heading_tag=”h1″ heading_display=”column” sh_style=”background” sh_background_style=”clipped” second_heading_color=”#FFFFFF” second_heading_color_gradient_direction=”30deg” sh_padding=”20px|3px|0px|3px|false|false” sh_margin=”-15px|0px|0px|20px|false|false” sh_padding_tablet=”” sh_padding_phone=”0px|3px|0px|0px|false|false” sh_padding_last_edited=”on|phone” sh_margin_tablet=”-15px|0px|0px|20px|false|false” sh_margin_phone=”0px|0px|0px|0px|false|false” sh_margin_last_edited=”on|phone” _builder_version=”4.27.4″ _module_preset=”default” first_heading_font=”Poppins||||||||” first_heading_text_align=”center” first_heading_text_color=”#FFFFFF” first_heading_font_size=”65px” first_heading_letter_spacing=”-4px” first_heading_line_height=”1em” second_heading_font=”Poppins||||||||” second_heading_text_color=”#071018″ second_heading_font_size=”110px” second_heading_letter_spacing=”-10px” second_heading_line_height=”1em” transform_scale=”88%|88%” custom_margin=”109px||10px||false|false” custom_padding=”||13px|||” first_heading_font_size_tablet=”150px” first_heading_font_size_phone=”70px” first_heading_font_size_last_edited=”on|phone” first_heading_letter_spacing_tablet=”-10px” first_heading_letter_spacing_phone=”-5px” first_heading_letter_spacing_last_edited=”on|phone” second_heading_font_size_tablet=”150px” second_heading_font_size_phone=”70px” second_heading_font_size_last_edited=”on|phone” second_heading_letter_spacing_tablet=”-10px” second_heading_letter_spacing_phone=”-5px” second_heading_letter_spacing_last_edited=”on|phone” global_colors_info=”{}” overlay_bg_color_gradient_type_tablet=”linear” overlay_bg_color_gradient_type_phone=”linear” overlay_bg_color_gradient_type__hover=”linear” image_bg_color_gradient_type__hover=”linear”][\/dipi_dual_heading][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ _module_preset=”default” positioning=”none” z_index=”2″ custom_margin=”|22px|136px|22px|false|true” custom_margin_tablet=”|20px||20px|false|true” custom_margin_phone=”|10px||10px|false|true” custom_margin_last_edited=”on|phone” custom_padding=”129px||7px|||” border_radii=”off||||” border_radii_tablet=”on|20px|20px|20px|20px” border_radii_phone=”on|15px|15px|15px|15px” border_radii_last_edited=”on|phone” locked=”off” global_colors_info=”{}”][et_pb_row _builder_version=”4.27.4″ _module_preset=”default” custom_padding=”||11px|||” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][dipi_dual_heading first_heading=”Frequently Asked Questions for Use with Healthcare Organizations: Legal Considerations for Data Sharing related to HIPAA ” heading_tag=”h1″ heading_display=”column” fh_padding=”0px|20px|20px|20px|false|true” sh_style=”background” sh_background_style=”normal” sh_padding=”0px|20px|20px|20px|false|true” sh_margin=”-30px|0px|0px|20px|false|false” fh_padding_tablet=”0px|20px|20px|20px|false|true” fh_padding_phone=”0px|20px|20px|20px|false|true” fh_padding_last_edited=”on|desktop” sh_padding_tablet=”0px|20px|20px|20px|false|true” sh_padding_phone=”0px|20px|20px|20px|false|true” sh_padding_last_edited=”on|desktop” sh_margin_tablet=”-30px|0px|0px|20px|false|false” sh_margin_phone=”-20px|0px|0px|0px|false|false” sh_margin_last_edited=”on|phone” module_id=”section1″ _builder_version=”4.27.4″ _module_preset=”default” first_heading_font=”Poppins||||||||” first_heading_text_align=”center” first_heading_text_color=”#000a23″ first_heading_font_size=”48px” first_heading_letter_spacing=”-5px” first_heading_line_height=”1.1em” second_heading_font=”Poppins||||||||” second_heading_text_align=”left” second_heading_text_color=”#071018″ second_heading_font_size=”80px” second_heading_letter_spacing=”-9px” second_heading_line_height=”1em” custom_margin=”9px||10px||false|false” first_heading_font_size_tablet=”100px” first_heading_font_size_phone=”60px” first_heading_font_size_last_edited=”on|tablet” first_heading_letter_spacing_tablet=”-7px” first_heading_letter_spacing_phone=”-4px” first_heading_letter_spacing_last_edited=”on|tablet” second_heading_font_size_tablet=”100px” second_heading_font_size_phone=”60px” second_heading_font_size_last_edited=”on|tablet” second_heading_letter_spacing_tablet=”-7px” second_heading_letter_spacing_phone=”-4px” second_heading_letter_spacing_last_edited=”on|tablet” locked=”off” global_colors_info=”{}” overlay_bg_color_gradient_type_tablet=”linear” overlay_bg_color_gradient_type_phone=”linear” overlay_bg_color_gradient_type__hover=”linear” image_bg_color_gradient_type__hover=”linear”][\/dipi_dual_heading][et_pb_blurb image_icon_width=”40px” icon_alignment=”left” content_max_width=”100%” _builder_version=”4.27.4″ _module_preset=”default” header_text_color=”#071018″ header_font_size=”22px” header_letter_spacing=”-0.2px” header_line_height=”1.2em” body_font=”Poppins||||||||” body_text_color=”#333333″ body_font_size=”18px” body_line_height=”1.4em” text_orientation=”center” custom_margin=”-3px||126px|0px|false|false” custom_padding=”|320px||320px|false|true” header_font_size_tablet=”22px” header_font_size_phone=”18px” header_font_size_last_edited=”on|phone” body_font_size_tablet=”” body_font_size_phone=”12px” body_font_size_last_edited=”on|phone” custom_css_blurb_title=”text-transform: none;” locked=”off” global_colors_info=”{}”]<\/p>\n
This section can be used by\u00a0<\/span><\/span>public health authorities (PHAs)<\/span>\u00a0<\/span>to prepare for conversations with healthcare organizations (HCOs) about legal implications for sharing electronic health information (EHI<\/span>), and<\/span>\u00a0<\/span>could also be shared with HCOs as part of discussions about access.<\/span><\/span>\u00a0<\/span><\/p>\n [\/et_pb_blurb][\/et_pb_column][\/et_pb_row][et_pb_row use_custom_gutter=”on” gutter_width=”2″ make_equal=”on” custom_padding_last_edited=”on|phone” _builder_version=”4.27.4″ _module_preset=”default” background_color=”#000a23″ width=”51%” width_tablet=”” width_phone=”90%” width_last_edited=”on|phone” custom_margin=”|auto|92px|auto||” custom_padding=”20px|45px|47px|45px|false|true” custom_padding_tablet=”20px|20px|20px|20px|true|true” custom_padding_phone=”10px|10px|10px|10px|true|true” border_radii=”on|15px|15px|15px|15px” border_width_all=”1px” border_color_all=”rgba(100,116,139,0.5)” border_width_bottom=”0px” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.24.2″ _module_preset=”default” global_colors_info=”{}”][et_pb_accordion open_toggle_text_color=”#0c6dff” open_toggle_background_color=”RGBA(255,255,255,0)” closed_toggle_background_color=”RGBA(255,255,255,0)” _builder_version=”4.27.4″ _module_preset=”default” toggle_font=”Poppins||||||||” toggle_text_align=”left” toggle_font_size=”22px” body_font=”Poppins|300|||||||” body_text_align=”left” body_text_color=”#FFFFFF” body_font_size=”19px” border_radii=”off|20px|20px||” border_width_all=”0px” global_colors_info=”{}”][et_pb_accordion_item title=”1. Can electronic health records be shared with PHAs who are covered entities under HIPAA? ” open=”on” open_toggle_text_color=”#0c6dff” closed_toggle_text_color=”#FFFFFF” _builder_version=”4.27.4″ _module_preset=”default” border_width_bottom=”0.8px” border_color_bottom=”#64748B” global_colors_info=”{}” toggle_text_color=”#FFFFFF”]<\/p>\n Yes<\/span>.\u00a0\u00a0<\/span><\/span>The HIPAA Privacy Rule (45 CFR 164.512 Subpart A) explicitly allows covered entities (e.g., providers, hospitals) to disclose protected health information (PHI) without patient authorization to PHAs that are legally authorized to collect it for public health activity purposes such as disease reporting, investigation, or outbreak response (45 CFR 164.512 Subpart B).<\/span><\/span>\u00a0<\/span><\/p>\n [\/et_pb_accordion_item][et_pb_accordion_item title=”2. What qualifies as a \u201cPublic Health Authority\u201d? ” open_toggle_text_color=”#0c6dff” closed_toggle_text_color=”#FFFFFF” _builder_version=”4.27.4″ _module_preset=”default” border_width_bottom=”0.8px” border_color_bottom=”#64748B” global_colors_info=”{}” toggle_text_color=”#FFFFFF” open=”off”]<\/p>\n A PHA is an agency or person authorized by law to collect or receive information to prevent or control disease, injury, or disability. This includes:<\/span>\u00a0<\/span><\/p>\n