The HIPAA privacy rules (45 CFR § 164.501 et seq.) generally prohibit healthcare providers and their business associates from disclosing protected health information in response to subpoenas and other ...
Self-insured group health plans are HIPAA “covered entities” and—unlike most fully insured arrangements—typically must maintain and distribute ...