A covered entity shall not do either of the following:

Ask a legal question, get an answer ASAP!
Click here to chat with a lawyer about your rights.

(A) Use or disclose protected health information without an authorization that is valid under 45 C.F.R. § 164.508 and, if applicable, 42 C.F.R. part 2, except when the use or disclosure is required or permitted without such authorization by Subchapter C of Subtitle A of Title 45 of the Code of Federal Regulations and, if applicable, 42 C.F.R. part 2;

(B) Use or disclose protected health information in a manner that is not consistent with 45 C.F.R. § 164.502.