Rule CG-TRB-007
Patient privacy: what rule CG-TRB-007 checks
Rule CG-TRB-007 is one of the checker's patient privacy rules. It cites 45 CFR 164.502(a)(5)(ii), 16 CFR Part 318. The reason, source and safer wording are below.
CG-TRB-007 · Blocks approval · Citation checked against stored text
Selling patient lists or health data, ignoring HIPAA authorization, or using patient photos on a vague intake form discloses protected health information without valid authorization.
Source: HIPAA Privacy Rule, 45 CFR 164.502(a)(5)(ii) (sale of PHI) and 164.508(a)(3) (marketing authorization); Washington My Health My Data Act, RCW 19.373; FTC Health Breach Notification Rule, 16 CFR Part 318
Safer wording: Do not sell or share patient or health data without a specific written authorization, and get a signed photo authorization before using any patient image.
45 CFR 164.502(a)(5)(ii), 16 CFR Part 318 · Needs counsel review
Next step
Check your copy against this rule
Run the checker and every flag cites its rule and source.