Question: what is the difference between consent and authorization to use patient-specific health information?
Answer: A: “Consent” is a general term under the Privacy Rule, but “authorization” has much more specific requirements. The Privacy Rule permits, but does not require, a CE to obtain patient “consent” for uses and disclosures of PHI for treatment, payment, and healthcare operations.