Authorization to Release Protected Health Information

Anytime you release protected health information (PHI) for a reason unrelated to treatment, billing, or healthcare operations an authorization is required.  For example:

• If a patient's employer contacts you and requests a confirmation that the patient was seen in the clinic on a certain date and PHI related to a "fitness-for-duty" examination, you must have the patient's signed authorization before sharing that information.