Question: what is the difference between consent and authorization under hipaa?
Answer: A: “Consent” is a general term under the Privacy Rule, but “authorization” has much more specific requirements. The Privacy Rule permits, but does not require, a CE to obtain patient “consent” for uses and disclosures of PHI for treatment, payment, and healthcare operations. ... An expiration date for the authorization.