Can PHI be shared via fax for treatment without patient authorization if safeguards are used?

Can PHI be shared via fax for treatment without patient authorization if safeguards are used?

• A. No, patient authorization always required
• B. Yes, with reasonable safeguards
• C. Only for emergencies
• D. Only with patient consent via written form

Answer: (B)

PHI can be shared for treatment without patient authorization under the HIPAA Privacy Rule, as long as the information disclosed is limited to what is needed for treatment and reasonable safeguards are in place to protect privacy. Faxing PHI is allowed when safeguards are followed: verify the recipient and organization, use a confidential cover sheet, transmit only the minimum necessary information, and ensure the documents are retrieved promptly and securely with access restricted to authorized personnel. This applies to routine treatment communications and is not limited to emergencies, and written authorization isn’t required for treatment disclosures—authorization would be needed for many uses outside the treatment context.

PHI can be shared for treatment without patient authorization under the HIPAA Privacy Rule, as long as the information disclosed is limited to what is needed for treatment and reasonable safeguards are in place to protect privacy. Faxing PHI is allowed when safeguards are followed: verify the recipient and organization, use a confidential cover sheet, transmit only the minimum necessary information, and ensure the documents are retrieved promptly and securely with access restricted to authorized personnel. This applies to routine treatment communications and is not limited to emergencies, and written authorization isn’t required for treatment disclosures—authorization would be needed for many uses outside the treatment context.