Rule CG-PRV-009
Patient privacy: what rule CG-PRV-009 checks
Rule CG-PRV-009 is one of the checker's patient privacy rules. It cites 45 CFR 164.508(a)(3), 45 CFR 164.514(b)(2). The reason, source and safer wording are below.
CG-PRV-009 · Blocks approval · Citation checked against stored text
A first name with an age and a hometown, or a named patient congratulated on a result, identifies a person. Using it needs the patient's written HIPAA authorization.
Source: HIPAA Privacy Rule, 45 CFR 164.508(a)(3); 45 CFR 164.514(b)(2)
Safer wording: Remove the name, age and town, or keep the signed authorization on file and use only what it allows.
45 CFR 164.508(a)(3), 45 CFR 164.514(b)(2) · Needs counsel review
Next step
Check your copy against this rule
Run the checker and every flag cites its rule and source.