| An outpatient surgical facility disclosed a patient’s protected health information (PHI) to a research entity for recruitment purposes without the patient’s authorization or an Institutional Review Board (IRB) or privacy-board-approved waiver of authorization. The outpatient facility reportedly believed that such disclosures were permitted by the Privacy Rule. Research the privacy rule and examine the section of the rule that addresses this violation. Imagine that you are an information management coordinator at this facility; analyze the possible actions that you would take to resolve this conflict using the most current version of the law. Remember, you are addressing this from a research perspective. |
