A signed HIPAA release form should be obtained from a patient before their protected health info may be shared with different people or organizations, except within the case of routine disclosures for treatment, payment or care operations permissible by the HIPAA Privacy Rule.A HIPAA release form ought to be nonheritable from a patient before revealing their letter to a 3rd party for any reason besides those laid out in forty-five CFR u00a7164.506, that area unit significantly lined in forty-five CFR u00a7164.508. These instances embody what area unit declared below:any reason apart from providing treatment, payment or different commonplace care operationsdisclosing patient info to associate degree insurance firmsharing of PHI to be used for functions of promoting or fund-raisingBefore PHI is given to a groundwork organizationBefore revealing psychotherapy notesBefore the sale of letter or sharing that involves remuneration