Skip Navigation

May a covered entity share protected health information directly with another covered entity's business associate?

Answer:

Yes. If the HIPAA Privacy Rule permits a covered entity to share protected health information with another covered entity, the covered entity is permitted to make the disclosure directly to a business associate acting on behalf of that other covered entity.






Date Created: 12/19/2002
Last Updated: 03/14/2006