HHS – April 2002
PATIENT:  The Privacy Rule requires my doctor to give my health information to researchers and the police (even if they don’t have a warrant) and health plans, all they have to do is ask.
The Rule permits such disclosures under specified circumstances, but does not require them.  In some cases, like research, an individual’s authorization may be required.  However, even when an authorization is not required and a disclosure is permitted by the Rule, there may be limitations or other requirements on such disclosures.
FALSE !
FALSE!    The Rule permits such disclosures under specified circumstances, but does not require them.  In some cases, like research, an individual’s authorization may be required.  However, even when an authorization is not required and a disclosure is permitted by the Rule, there may be limitations or other requirements on such disclosures.

In all cases where an individual has not authorized a requested disclosure, a doctor should use his own professional and ethical judgment about when and what information to disclose in response to such requests.  A doctor is not required under the Rule to disclose health information for research or law enforcement.