Uses and disclosures
Protected health information may be used or disclosed for treatment, payment, healthcare operations, public-health activities, legal requirements, safety purposes, and other uses permitted or required by law. Other uses generally require written authorization.