HIPAA GENERAL OPERATING POLICY #23
USES AND DISCLOSURES TO AVERT A SERIOUS
THREAT TO HEALTH OR SAFETY
I. Permitted Disclosures
Except as otherwise provided in HIPAA General Operating Policies 8, 44 and 45, a HCC may, consistent with applicable law and ethical standards, use or disclose PHI, if the HCC in good faith believes the use or disclosure is necessary to lessen a direct threat of imminent harm to the health or safety of any individual and is to a person or persons reasonably able to prevent or lessen the threat, including the target of the threat. A disclosure pursuant to this paragraph must protect the confidentiality of the health care information consistent with sound professional judgment.
Revised 09/04/03