Myth Buster: Healthcare providers violate HIPAA if they share patient information with public health authorities without first obtaining patient consent

MYTH: Healthcare providers violate HIPAA if they share patient information with public health authorities without first obtaining patient consent.

FACT: Under HIPAA’s permitted use and disclosure provisions, healthcare providers may share a patient’s protected health information with public health authorities for their use in carrying out a variety of public health activities without obtaining patient consent. 

Learn more about the public health exception to HIPAA, including when a public health official may disclose an individual's PHI, in our Myth Buster.