Skip to main content


U.S. flag
      An official website of the United States government
              Here’s how you know
        Here’s how you knowDot gov**Official websites use .gov**
                 A **.gov** website belongs to an official government organization in the United States.
                  HTTPS**Secure .gov websites use HTTPS**
                 A **lock** (A locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. 
  Menu Close
          Enter the terms you wish to search for.
    Search
        








  
  
    

  
      

                                      About HHS
    
                        
                              
      
      
      Programs & Services
    
                        
                              
      
      
      Grants & Contracts
    
                        
                              
      
      
      Laws & Regulations                  
Health Information Privacy
  HIPAA for Individuals
    
                        
                                            
      
      
      Filing a Complaint
    
                        
                                            
      
      
      HIPAA for Professionals
    
                        
                                            
      
      
      Newsroom

              

    



Breadcrumb
    HHS
                              HIPAA Home
                              For Professionals
                              FAQ
                              Safeguards


    

    

    Navigate to:
  Authorizations (30)
          Business Associates (41)
          Compliance Dates (2)
          Covered Entities (14)
          Decedents (9)
          Disclosures for Law Enforcement Purposes (5)
          Disclosures for Rule Enforcement (1)
          Disclosures in Emergency Situations (2)
          Disclosures Required by Law (6)
          Disclosures to Family and Friends (28)
          Disposal of Protected Health Information (6)
          Facility Directories (7)
          Family Medical History Information (3)
          FERPA and HIPAA (10)
          Group Health Plans (3)
          Incidental Uses and Disclosures (10)
          Judicial and Administrative Proceedings (8)
          Minimum Necessary (14)
          Notice of Privacy Practice (20)
          Preemption of State Law (10)
          Privacy Rule: General Topics (12)
          Protected Health Information (2)
          Public Health Uses and Disclosures (13)
          Research Uses and Disclosures (20)
          Right to an Accounting of Disclosures (8)
          Right to File a Complaint (1)
          Right to Request a Restriction (4)
          Safeguards (13)
          Security Rule (24)
          Smaller Providers and Businesses (145)
          Student Immunizations (8)
          Transition Provisions (3)
          Treatment, Payment, and Health Care Operations Disclosures (30)
          Workers Compensation Disclosures (5)
          Limited Data Set (6)
          Marketing (17)
          Marketing - Refill Reminders (16)
          Personal Representatives and Minors (12)
          Right to Access and Research (58)
          Mental Health (35)
          Health Information Technology (41)
          Telehealth (11)Text resize icon

                    




Safeguards
  
  
  
      197-Does HIPAA require providers to soundproof walls to avoid conversations being overheard
    The Privacy Rule does not require these types of structural changes be made to facilities.
Read the full answer
      198-May providers leave messages for patients at their homes to remind them of appointments
    Yes. The HIPAA Privacy Rule permits health care providers to communicate with patients regarding their health care.
Read the full answer
      199-May providers use patient sign-in sheets or call out the names in their waiting rooms
    Yes. Covered entities, such as physician’s offices, may use patient sign-in sheets or call out patient names in waiting rooms, so long as the information disclosed is appropriately limited.
Read the full answer
      200-Can providers prohibited maintain patient medical charts at bedside or outside of exam rooms
    No. The HIPAA Privacy Rule does not prohibit covered entities from engaging in common and important health care practices; nor does it specify the specific measures that must be applied to protect an individual’s privacy while engaging in these practices.
Read the full answer
      201-Will HIPAA Privacy Rule allow clinics to place patient charts outside an exam room
    Yes, the Privacy Rule permits this practice as long as the clinic takes reasonable and appropriate measures to protect the patient’s privacy.
Read the full answer
      202-Will HIPAA allow the hospital to display patient names outside of rooms
    The Privacy Rule explicitly permits certain incidental disclosures that occur as a by-product of an otherwise permitted disclosure—for example, the disclosure to other patients in a waiting room of the identity of the person whose name is called.
Read the full answer
      215-Are covered entities required to completely restructure existing workflow systems to comply with minimum necessary requirements
    No. The basic standard for minimum necessary uses requires that covered entities make reasonable efforts to limit access to protected health information to those in the workforce that need access based on their roles in the covered entity.
Read the full answer
      575-What does HIPAA require of covered entities when they dispose of PHI
    What do the HIPAA Privacy and Security Rules require of covered entities when they dispose of protected health information?
Read the full answer
      576-May a covered entity dispose of protected health information in dumpsters accessible by the public
    May a covered entity dispose of protected health information in dumpsters accessible by the public?
Read the full answer
      577-May a covered entity hire a business associate to dispose of protected health information
    May a covered entity hire a business associate to dispose of protected health information?
Read the full answer
      578-May a covered entity reuse or dispose of computers store electronic PHI
    May a covered entity reuse or dispose of computers or other electronic media that store electronic protected health information?
Read the full answer
      579-How should providers dispose of PHI that they use off of the covered entity’s premises
    How should home health workers or other workforce members of a covered entity dispose of protected health information that they use off of the covered entity’s premises?
Read the full answer
      580-Does HIPAA require covered entities to keep patients’ medical records for any period of time
    Does the HIPAA Privacy Rule require covered entities to keep patients’ medical records for any period of time?
Read the full answerBack to top
    Contact HHS
    
                        
                                            
      
      
      Careers
    
                        
                                            
      
      
      HHS FAQs
    
                        
                                            
      
      
      Nondiscrimination NoticeHHS Archive
    
                        
                                            
      
      
      Accessibility Statement
    
                        
                                            
      
      
      Privacy Policy
    
                        
                                            
      
      
      Viewers & PlayersBudget/Performance
    
                        
                                            
      
      
      Inspector General
    
                        
                                            
      
      
      Web Site Disclaimers
    
                        
                                            
      
      
      EEO/No Fear ActFOIA
    
                        
                                            
      
      
      The White House
    
                        
                                            
      
      
      USA.gov
    
                        
                                            
      
      
      Vulnerability Disclosure Policy
        Sign Up for Email Updates

Receive the latest updates from the Secretary, Blogs, and News Releases.

Sign Up
  HHS Headquarters
          200 Independence Avenue, S.W.
                  Washington, D.C. 20201
                  Toll Free Call Center: 1-877-696-6775​