

Rather, the Privacy Rule regulates how and when covered entities and business associates are permitted to use 6Īnd disclose 7 protected health information 8 Second, the Privacy Rule does not regulate the ability of covered entities and business associates to request information from patients or visitors. (health plans, health care clearinghouses, and health care providers that conduct standard electronic transactions) and, to some extent, their business associates. Does the HIPAA Privacy Rule prohibit businesses or individuals from asking whether their customers or clients have received a COVID-19 vaccine?ĭoes not prohibit any person ( e.g., an individual or an entity such as a business), including HIPAA covered entities and business associates, from asking whether an individual has received a particular vaccine, including COVID-19 vaccines. Other Administrative Simplification Rulesġ.Covered Entities & Business Associates has sub items, about Covered Entities & Business Associates.Patient Safety has sub items, about Patient Safety.Mental Health & Substance Use Disorders.

Special Topics has sub items, about Special Topics.Compliance & Enforcement has sub items, about Compliance & Enforcement.Breach Notification has sub items, about Breach Notification.
