Pennsylvania Code
Title 31 - INSURANCE
Part VIII - Miscellaneous Provisions
Chapter 146b - PRIVACY OF CONSUMER HEALTH INFORMATION
Subchapter B - RULES FOR DISCLOSURE OF NONPUBLIC PERSONAL HEALTH INFORMATION
Section 146b.12 - Authorizations
Current through Register Vol. 54, No. 44, November 2, 2024
(a) Valid authorization contents. A valid authorization to disclose nonpublic personal health information under § 146b.11(a) (relating to authorization required for disclosure of the nonpublic personal health information) shall be in written or electronic form and shall contain all of the following:
(b) Duration of authorization. An authorization for the purposes of § 146b.11(a) shall specify a length of time for which the authorization shall remain valid, which may not be for more than 24 months.
(c) Revocation of authorization. A consumer who is the subject of nonpublic personal health information may revoke an authorization provided under this subchapter at any time, subject to the rights of an individual or licensee who acted in reliance on the authorization prior to notice of the revocation.
(d) Record of authorization. A licensee shall retain the authorization and a revocation of the authorization, or copies thereof, for 6 years in the record of the individual who is the subject of nonpublic personal health information.