{"meta":{"status":200,"messages":[],"pagination":{"max":1,"offset":0,"count":1,"total":1,"pageNum":1,"totalPages":1,"sort":null,"currentUrl":"https://api.digitalmedia.hhs.gov/api/v2/resources/media.json?offset=0&max=1&ignoreHiddenMedia=1&format=json&id=964&newUrlBase=http://www.cdc.gov/vaccines/imz-managers/laws/HIPAA","nextUrl":null,"previousUrl":null}},"results":[{"content":"<body>\n <div class=\"syndicate\"> \n  <h1 autofocus=\"true\">HIPAA and Perinatal Hepatitis B Prevention Frequently Asked Questions</h1> \n </div> \n <div class=\"syndicate\"> \n  <div> \n   <div> \n    <div data-section=\"cdc_faqs_summary\"> \n     <div> \n      <h2>Key points</h2> \n     </div> \n     <div> \n      <ul> \n       <li>These questions and answers are intended to provide guidance to health care providers and public health agencies about the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule and how it impacts perinatal hepatitis B prevention.</li> \n       <li>This information is not intended to provide legal advice to you or your organization.</li> \n      </ul> \n      <div> \n      </div> \n     </div> \n     <div> \n      <figure> \n       <div> \n        <img src=\"http://www.cdc.gov/vaccines/media/images/2025/07/storage-handling-toolkit-2.jpg\" alt=\"Cover of the Storage and Handling Toolkit\"> \n       </div> \n      </figure> \n     </div> \n    </div> \n   </div> \n   <div> \n    <div data-section=\"cdc_faqs_cat1\"> \n     <a name=\"Questions%20and%20answers\" title=\"Questions and answers\" href=\"http://www.cdc.gov\"> \n      <!-- --></a> \n     <h2>Questions and answers</h2> \n     <div> \n      <div> \n       <div> \n        <h3> <button aria-controls=\"accordion-panel-pfvI4k2Kv0\" aria-expanded=\"false\" data-bs-target=\"#accordion-panel-pfvI4k2Kv0\" data-bs-toggle=\"collapse\" type=\"button\"> <span>Q: Does HIPAA permit providers, hospitals, and laboratories to report HBsAg-positive women to state and local health departments (including local health agencies and local boards of health) without the authorization of the individual, regardless of whether the state has a reporting law?</span> </button> </h3> \n        <div> \n         <div> \n          <p><strong>A</strong>: Under 45 CFR \u00a7 164.512(b), for disclosures not required by law, covered entities may disclose, without authorization, to a public health authority authorized by law to collect or receive the information for the purpose of preventing or controlling disease, injury, or disability, the minimum necessary information to accomplish the intended public health purpose of the disclosure. In addition, under 45 CFR \u00a7164.512(a), covered entities may disclose protected health information to public health authorities if the disclosure is required by law. A specific mandate to report is not required for disclosure. In states that do not have a law that specifically mandates the reporting of maternal HBsAg status, notifiable disease reporting laws mandate reporting of hepatitis B.</p> \n         </div> \n        </div> \n       </div> \n      </div> \n      <div> \n       <div> \n        <h3> <button aria-controls=\"accordion-panel-NGsT1MHWKk\" aria-expanded=\"false\" data-bs-target=\"#accordion-panel-NGsT1MHWKk\" data-bs-toggle=\"collapse\" type=\"button\"> <span>Q: Does HIPAA permit providers and hospitals to disclose patient information to state and local health departments (including local health agencies and local boards of health) without the authorization of the individual, for perinatal case management (e.g. immunization, prophylaxis, and post vaccination serology)?</span> </button> </h3> \n        <div> \n         <div> \n          <p><strong>A</strong>: Under 45 CFR \u00a7 164.512(b), for disclosures not required by law, covered entities may disclose, without authorization, to a public health authority authorized by law to collect or receive the information for the purpose of preventing or controlling disease, injury, or disability, the minimum necessary information to accomplish the intended public health purpose of the disclosure.</p> \n         </div> \n        </div> \n       </div> \n      </div> \n      <div> \n       <div> \n        <h3> <button aria-controls=\"accordion-panel-3jLm0o-U0I\" aria-expanded=\"false\" data-bs-target=\"#accordion-panel-3jLm0o-U0I\" data-bs-toggle=\"collapse\" type=\"button\"> <span>Q: Can patient records be reviewed by state and local health department staff and their contractual agents when conducting quality assurance activities (e.g. chart reviews to assess HBsAg screening rates and appropriate prophylaxis), case investigations and/or disease outbreak activities?</span> </button> </h3> \n        <div> \n         <div> \n          <p><strong>A</strong>: As explained above, under 45 CFR \u00a7 164.512(b), for disclosures not required by law, covered entities may disclose, without authorization, to a public health authority authorized by law to collect or receive the information for the purpose of preventing or controlling disease, injury, or disability, the minimum necessary information to accomplish the intended public health purpose of the disclosure.</p> \n         </div> \n        </div> \n       </div> \n      </div> \n      <div> \n       <div> \n        <h3> <button aria-controls=\"accordion-panel-uaTFxrQJGn\" aria-expanded=\"false\" data-bs-target=\"#accordion-panel-uaTFxrQJGn\" data-bs-toggle=\"collapse\" type=\"button\"> <span>Q: Does the HIPAA Privacy Rule apply to Indian Health Services and tribal clinics?</span> </button> </h3> \n        <div> \n         <div> \n          <p><strong>A</strong>: Yes. The HIPAA Privacy Rule governs the use and disclosure of protected health information by covered entities (health plans, clearinghouses, and providers who transmit specified transactions electronically). The definition of health plans (45 CFR \u00a7160.103) includes the Indian Health Service (IHS) and programs under the Indian Health Care Improvement Act, 25 U.S.C. 1601 et seq. (45 CFR 160.103(1)(xii)).</p> \n         </div> \n        </div> \n       </div> \n      </div> \n     </div> \n    </div> \n    <div data-section=\"cdc_faqs_cat2\"> \n     <a name=\"Resources\" title=\"Resources\" href=\"http://www.cdc.gov\"> \n      <!-- --></a> \n     <h2>Resources</h2> \n     <ul> \n      <li><a href=\"http://www.hhs.gov/ocr/hipaa\" rel=\"noreferrer\" data-domain-ext=\"gov\">Office for Civil Rights<span aria-label=\" external icon\" role=\"img\"></span><span aria-hidden=\"true\" alt=\"external icon\"></span></a> (responsible for enforcing the Privacy Rule)</li> \n      <li><a href=\"https://www.cdc.gov/mmwr/pdf/other/m2e411.pdf\" target=\"_blank\">CDC/DHHS guidance on the Privacy Rule and Public Health [24 pages]<span aria-label=\" pdf icon\" role=\"img\"></span><span aria-hidden=\"true\"></span></a></li> \n     </ul> \n    </div> \n    <div data-section=\"cdc_faqs_cat3\"> \n     <a name=\"Related%20pages\" title=\"Related pages\" href=\"http://www.cdc.gov\"> \n      <!-- --></a> \n     <h2>Related pages</h2> \n     <ul> \n      <li><a href=\"http://www.cdc.gov/vaccines/php/requirements-laws/hipaa-overview.html\">HIPAA \u2013 overview</a></li> \n      <li><a href=\"http://www.cdc.gov/vaccines/php/requirements-laws/hipaa-patient-records-iqip-vfc.html\">HIPAA and Access to Patient Records during IQIP &amp; VFC Visits</a></li> \n      <li><a href=\"http://www.cdc.gov/iis/policy-legislation/index.html\">IIS HIPAA</a></li> \n     </ul> \n    </div> \n   </div> \n   <div> \n    <aside role=\"complementary\"> \n     <div data-sid=\"\"> \n      <h2> On This Page </h2> \n      <div> \n       <ul> \n        <li><a href=\"#cdc_faqs_cat1-questions-and-answers\" title=\"Questions and answers\">Questions and answers</a></li> \n        <li><a href=\"#cdc_faqs_cat2-resources\" title=\"Resources\">Resources</a></li> \n        <li><a href=\"#cdc_faqs_cat3-related-pages\" title=\"Related pages\">Related pages</a></li> \n       </ul> \n      </div> \n     </div> \n    </aside> \n    <aside role=\"complementary\"> \n    </aside> \n   </div> \n  </div> \n  <section> \n   <time datetime=\"2024-07-30 00:00:00\"> July 30, 2024 </time> \n  </section> \n  <div> \n   <div> \n    <a data-action=\"summary\" href=\"#content-sources\" role=\"button\" data-bs-toggle=\"collapse\" aria-expanded=\"false\" aria-controls=\"content-sources\" data-cs-toggle=\"\">Sources</a> \n    <a data-action=\"print\" href=\"#print\" aria-label=\"print this page\" onclick=\"window.print()\">Print</a> \n    <a data-action=\"share\" href=\"#share\" data-bs-toggle=\"dropdown\" aria-label=\"share this page\" aria-expanded=\"false\">Share</a> \n    <div data-popper-placement=\"bottom-start\"> \n     <a href=\"#\"><span></span></a> \n     <a href=\"#\"><span></span></a> \n     <a href=\"#\"><span></span></a> \n     <a href=\"#\"><span></span></a> \n    </div> \n   </div> \n   <div> \n    <div role=\"dialog\"> \n     <a target=\"_blank\" title=\"Share to Facebook\" rel=\"noreferrer noopener\" href=\"https://www.facebook.com/\"> <span>Facebook</span> <span></span> </a> \n     <a target=\"_blank\" title=\"Share to LinkedIn\" rel=\"noreferrer noopener\" href=\"https://www.linkedin.com/\"> <span>LinkedIn</span> <span></span> </a> \n     <a target=\"_blank\" title=\"Share to Twitter\" rel=\"noreferrer noopener\" href=\"https://twitter.com/\"> <span>Twitter</span> <span></span> </a> \n     <a target=\"_blank\" title=\"Embed this Page\" rel=\"noreferrer noopener\" href=\"https://tools.cdc.gov/medialibrary/index.aspx#/sharecontent\"> <span>Syndicate</span> <span></span> </a> \n    </div> \n   </div> \n   <div> \n    <div role=\"status\"> \n     <div>\n       Content Source: \n     </div> \n     <a href=\"http://www.cdc.gov/ncird/index.html\">National Center for Immunization and Respiratory Diseases</a>; \n     <a href=\"https://www.cdc.gov/ncird/divisions-offices/isd.html\">Immunization Services Division</a> \n    </div> \n   </div> \n  </div> \n  <section> \n  </section> \n </div>\n <script type=\"application/ld+json\">{\"@context\":\"http://schema.org\",\"@type\":\"Article\",\"headline\":\"Laws - HIPAA and Perinatal Hepatitis B Prevention - Imz Managers - Vaccines\",\"datePublished\":\"2014-30-13T00:30:08Z\",\"description\":\"HIPAA Perinatal Hepatitis B Prevention - Questions Answered\",\"about\":\"prevention, research, policy, hepatitis, laws, vaccines, cessation, imz, managers, HIPAA, perinatal, secondhand smoke, HIPAA Perinatal Hepatitis B Prevention, Health Insurance Portability and Accountability Act of 1996, HIPPA overview, introduction to HIPAA, what is HIPAA, What is the HIPAA Privacy Rule, Implications for Public Health, Definition of Public Health Authority\",\"audience\":\"\",\"dateCreated\":\"2014-30-13T00:30:08Z\",\"dateModified\":\"2026-21-29T01:21:07Z\",\"sourceOrganization\":\"Centers for Disease Control and Prevention\"}</script>\n</body><div class='syndicate'><span><Strong>Syndicated Content Details:</strong></span><br/><span>Source URL: <a href='http://www.cdc.gov/vaccines/imz-managers/laws/HIPAA/qa-patient-recs-perinatal-hepb.html'>http://www.cdc.gov/vaccines/imz-managers/laws/HIPAA/qa-patient-recs-perinatal-hepb.html</a></span><br/><span>Source Agency: <a href='http://www.cdc.gov'>Centers for Disease Control and Prevention (CDC)</a></span><br/><span>Captured Date: 2014-03-13 00:30:08.0</span><br/></div><iframe src=\"//www.googletagmanager.com/ns.html?id=GTM-KT9TM9&mediaId=964&mediaType=html&sourceUrl=http%3A%2F%2Fwww.cdc.gov%2Fvaccines%2Fimz-managers%2Flaws%2FHIPAA%2Fqa-patient-recs-perinatal-hepb.html&userId=-1&sourceId=6&sourceAcronym=CDC&campaignId=-1&campaignName=null&languageId=1&isoCode=eng\" height=\"0\" width=\"0\" style=\"display:none;visibility:hidden\"></iframe><noscript><iframe src=\"//www.googletagmanager.com/ns.html?id=GTM-KT9TM9&mediaId=964&mediaType=html&sourceUrl=http%3A%2F%2Fwww.cdc.gov%2Fvaccines%2Fimz-managers%2Flaws%2FHIPAA%2Fqa-patient-recs-perinatal-hepb.html&userId=-1&sourceId=6&sourceAcronym=CDC&campaignId=-1&campaignName=null&languageId=1&isoCode=eng\" height=\"0\" width=\"0\" style=\"display:none;visibility:hidden\"></iframe></noscript>","description":"HIPAA Perinatal Hepatitis B Prevention - Questions Answered","id":964,"mediaType":"Html","name":"Laws - HIPAA and Perinatal Hepatitis B Prevention - Imz Managers - Vaccines","sourceUrl":"http://www.cdc.gov/vaccines/imz-managers/laws/HIPAA/qa-patient-recs-perinatal-hepb.html"}]}