Reader Questions:
Clarify HIPAA Terminology
Published on Tue Jan 16, 2024
Question: What is the difference between “consent” and “authorization” in the context of the HIPAA Privacy Rule? AAPC Subscriber Answer: Under the HIPAA Privacy Rule, the U.S. Department of Health and Human Services (HHS) allows covered entities (CEs) to obtain patient consent for protected health information (PHI). “The Privacy Rule permits, but does not require, a covered entity voluntarily to obtain patient [...]