"We have received reports that some consultants and education providers have claimed that they or their materials or systems are endorsed or required by HHS or, specifically, by OCR. In fact, HHS and OCR do not endorse any private consultants' or education providers' seminars, materials or systems, and do not certify any persons or products as "HIPAA compliant." The Privacy Rule does not require attendance at any specific seminars. All of OCR's materials are available free on this web site.
If you believe anyone is making false or misleading representations about HHS or OCR in regard to HIPAA training and compliance, please notify us via email at ocrcomplaint@..." id="anch_87" target="_blank" rel="noopener noreferrer">ocrcomplaint@... or by postal mail at Office for Civil Rights, 200 Independence Ave, S.W., Room 509F, Washington, D.C. 20201."
"As a reminder, permitted uses and disclosures must be addressed in a covered entity’s Notice of Privacy Practices. HHS offers model notices of privacy practices for both health care providers and health plans. These model notices are available for free download, in English and in Spanish, at http://www.hhs.gov/hipaa/for-professionals/privacy/guidance/model-notices-privacy-practices
It is our hope that the fact sheets will be helpful tools that help clarify HIPAA and support the goals of interoperability of health information.
Read the fact sheets
"We use personal health information (PHI) about you to take care of you, and to work with other doctors to take care of you.We also use it for billing and similar "office operations." Other uses not related to taking care of you (life insurance applications, etc.,) require your specific permission.YOU DON'T HAVE TO READ THE REST OF THIS. (More detail, examples.) "Hope this helps.