what does hipaa say about responding to subpoenas
Accordingly, HIPAA only allows a health care provider to disclose PHI in response to such a subpoena if one of the following conditions is satisfied: 1  Satisfactory written assurances. 2  Qualified protective order. 3  Health care provider notifies the patient or obtains protective order.