HIPAA Privacy Rule

1. Privacy Rule summary

   Covered entities, business associates, PHI and what the rule regulates.

2. Uses and disclosures for TPO

   Disclosures for treatment, payment and health care operations without authorization.

3. Minimum necessary

   Limiting PHI use and disclosure to the minimum necessary.

4. Right of access

   Individual right to inspect and receive PHI, timelines and fees.

5. Business associates

   BA definition and BAA required terms.

6. De-identification

   Safe Harbor and Expert Determination methods.

7. Authorizations and marketing

   When authorization is required, including marketing and sale of PHI.

8. 45 CFR Part 164 Subpart E

   Regulation text for privacy standards.

9. Enforcement

   OCR investigations, resolution agreements and penalties.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.