Skip to content
Stetwright

Rule CG-DAT-001

Patient privacy: what rule CG-DAT-001 checks

Rule CG-DAT-001 is one of the checker's patient privacy rules. It cites 45 CFR 164.502(a)(5)(ii), 16 CFR Part 318 and more. The reason, source and safer wording are below.

  1. CG-DAT-001 · Blocks approval · Citation checked against stored text

    Selling or buying lists of people by health condition or purchase, or texting them from such a list, breaks consent and health privacy rules.

    Source: HIPAA Privacy Rule, 45 CFR 164.502(a)(5)(ii) (sale of PHI); FTC Health Breach Notification Rule, 16 CFR Part 318; TCPA, 47 U.S.C. 227

    Safer wording: Do not buy, sell or use health-based lead lists. Contact only people who gave consent to this sender.

    45 CFR 164.502(a)(5)(ii), 16 CFR Part 318, 47 U.S.C. 227 · Needs counsel review

Next step

Check your copy against this rule

Run the checker and every flag cites its rule and source.