HIPAA
The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule recognizes the legitimate need for public health authorities and others responsible for ensuring public health and safety to have access to protected health information to carry out their public health mission. The Privacy Rule permits covered entities (licensed medical providers, nurses, hospitals, laboratories, etc.) to disclose protected health information, without authorization to public health authorities that are legally authorized to receive such reports for the purpose of preventing or controlling disease, injury, or disability. See 45 CFR 164.512(b)(1)(i).
