Oklahoma Administrative Code
Title 340 - Department of Human Services
Chapter 2 - Administrative Components
Subchapter 8 - Health Insurance Portability and Accountability Act (Hipaa) Privacy Rule
Section 340:2-8-8 - Disclosures to friends and relatives

(a) When the client is informed in advance and given the opportunity to agree or to refuse or restrict the disclosure of protected health information (PHI), Oklahoma Department of Human Services (DHS) staff may disclose PHI to the client's friends and relatives to the extent the client allows. The disclosure must only reveal PHI that directly relates to such person's involvement with the client's care or payment for such care.

(b) When the client is not present, or the opportunity to object to the disclosure cannot practicably be provided due to the client's incapacity or an emergency situation DHS staff determines, using professional judgment, if the disclosure is in the client's best interest. When disclosure is in the client's best interest, the minimum necessary disclosure may be made. When disclosure is not in the client's best interest, no disclosure is made.

(c) Verbal permission to disclose PHI to friends and relatives is not sufficient when the client is referred to or receiving substance abuse treatment, mental health, or vocational rehabilitation services. Written authorization is required under those circumstances.