Oklahoma Administrative Code
Title 340 - Department of Human Services
Chapter 2 - Administrative Components
Subchapter 8 - Health Insurance Portability and Accountability Act (Hipaa) Privacy Rule
Section 340:2-8-7 - Authorization
Universal Citation: OK Admin Code 340:2-8-7
Current through Vol. 42, No. 1, September 16, 2024
(a) A valid authorization is required to disclose protected health information (PHI) unless it is:
(1) for the purposes of treatment, payment,
or health care operations; or
(2)
listed in Oklahoma Administrative Code (OAC)
340:2-8-6.
(b) An authorization is considered valid, when:
(1) it contains the elements described,
per Section 164.508(c) of Title 45 of the Code of Federal Regulations and OAC
340:2-8-2;
(2) the expiration date has not passed;
and
(3) the authorization is signed
by the client, parent, guardian, or client's personal representative.
(c) A client may only revoke an authorization in writing.
Added at 20 Ok Reg 2907, eff 8-21-03 (emergency); Added at 21 Ok Reg 784, eff 4-26-04
Disclaimer: These regulations may not be the most recent version. Oklahoma may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google
Privacy Policy and
Terms of Service apply.
