2 docs tagged with "authorization"

Any entity that receives PHI from a covered entity to perform a function on its behalf is a Business Associate

HIPAA permits specific uses and disclosures of PHI without patient authorization