SEC. 13405. RESTRICTIONS ON CERTAIN DISCLOSURES AND SALES OF
HEALTH INFORMATION; ACCOUNTING OF CERTAIN PRO-
TECTED HEALTH INFORMATION DISCLOSURES; ACCESS
TO CERTAIN INFORMATION IN ELECTRONIC FORMAT.
(a) REQUESTED RESTRICTIONS ON CERTAIN DISCLOSURES OF
HEALTH INFORMATION.—In the case that an individual requests
under paragraph (a)(1)(i)(A) of section 164.522 of title 45, Code
of Federal Regulations, that a covered entity restrict the disclosure
of the protected health information of the individual, notwith-
standing paragraph (a)(1)(ii) of such section, the covered entity
must comply with the requested restriction if—
(1) except as otherwise required by law, the disclosure
is to a health plan for purposes of carrying out payment or
health care operations (and is not for purposes of carrying
out treatment); and
(2) the protected health information pertains solely to a
health care item or service for which the health care provider
involved has been paid out of pocket in full.