HIPAA GENERAL OPERATING POLICY #27
CONFIDENTIAL COMMUNICATIONS REQUIREMENTS
A covered health care provider must permit individuals to request and must accommodate reasonable requests to receive communications of PHI by alternative means or at alternative locations.
A health plan must permit individuals to request and must accommodate reasonable requests to receive communications of PHI by alternative means or at alternative locations, if the individual clearly states that the disclosure of all or part of that information could endanger the individual. A HCC may require an individual to make a request for a confidential communication in writing. A HCC may condition the provision of a reasonable accommodation on information as to how payment, if any and when appropriate, will be handled and specification of an alternative address or other method of contact. A HCC may not require an explanation of the basis for the request as a condition.