PATIENT: The Privacy Rule requires my doctor to give my health information to researchers and the police (even if they don’t have a warrant) and health plans, all they have to do is ask.
The Rule permits such disclosures under specified circumstances, but does
not require them. In some cases, like
research, an individual’s authorization may be required. However, even when an authorization is not required and a disclosure is
permitted by the Rule, there may be limitations or other requirements on such disclosures.