Congressional action would be required to address additional patient privacy protections. Providers and health plans are required to give patients a clear written explanation of how they can use, keep, and disclose their health information. Patients must be able to see and get copies of their records, and request amendments. In addition, a history of most disclosures must be made accessible to patients. Patient authorization to disclose information must meet specific requirements.
Patients have the right to request restrictions on the uses and disclosures of their information.
Providers and health plans generally cannot condition treatment on a patient s agreement to disclose health information for non-routine uses. Recourse is provided if privacy protections are violated. With few exceptions, an individual s health information can be used for health purposes only. Health information may not be used for non-health purposes. Disclosures of information must be limited to the minimum necessary for the purpose of disclosure.