Minimum Necessary Rule. An important aspect of the HIPAA Privacy Rule is the principle of "minimum necessary". UTRGV employees must make reasonable efforts to request, use, and share only the minimum amount of PHI needed to accomplish the intended purpose. When the minimum necessary standard applies to a use or disclosure of PHI, employees may not request the entire medical record for a particular purpose, unless this purpose specifically justifies the whole record as the amount reasonably needed to accomplish the intended purpose. The minimum necessary requirement does not apply to: • Health care providers for treatment purposes • Disclosures to the patient or their legal representative • Disclosures made in accordance with an authorization • Other disclosures required by law Patient information used in research is subject to special HIPAA provisions. Please contact the Institutional Review Board (IRB) for more information at ▇▇▇-▇▇▇-▇▇▇▇
Appears in 2 contracts
Sources: Hipaa Agreement, Access Request Form