Source: http://www.compliancelawjournal.com/compliancelawjournal/issue_1?pg=37
Timestamp: 2019-04-21 11:14:51+00:00

Document:
47. The Privacy Rule defines treatment as “the provision, coordination, or management of health care and related services by one or more health care providers, including the coordination or management of health care by a health care provider with a third party; consultation between health care providers relating to a patient; or the referral of a patient for health care from one health care provider to another.” 45 C.F.R. § 164.501 (2016).
48. The Privacy Rule defines payment as the activities “undertaken by a health plan to obtain premiums or to determine or fulfill its responsibility for coverage and provision of benefits under the health plan” as well as the activities of a “health care provider or health plan to obtain or provide reimbursement for the provision of health care.” Id. § 164.501.
49. The Privacy Rule defines health care operations with respect to a list of activities that are related to a covered entity’s covered functions. See id. (defining health care operations). These activities include, but are not limited to, conducting quality assessment and improvement activities, conducting training programs in which medical and other health care students learn to practice health care under supervision, and arranging for the provision of legal services. See id.
50. See id. § 164.506(c)( 1) (permitting a covered entity to use or disclose PHI for its own treatment, payment, or health care operations).
51. Covered entities may use and disclose PHI for twelve different public policy activities without the prior written authorization of the individual who is the subject of the information. See id. § 164.512(a)-(l). These public policy activities include, but are not limited to, uses and disclosures required by law, uses and disclosures for public health activities, disclosures for law enforcement activities, uses and disclosures for research, and disclosures for workers’ compensation activities. See id. § 164.512(a), (c), (f), ( i), and (l).
52. See id. § 164.501 (“Treatment means. . .consultation[s] between health care providers relating to a patient”).
53. See id. (“Payment means...[t]he activities undertaken by...[a] health care provider. . .to obtain. . .reimbursement for the provision of health care.”) (permitting a covered entity to disclose PHI for its own payment activities).
54. See id. (“Health care operations means. . .conducting training programs in which students, trainees, or practitioners in areas of health care learn under supervision to practice or improve their skills as health care providers.”).

References: § 164
 § 164
 § 164
 § 164
 § 164
 § 164