Sarraille William A, Spencer Anna L
Arent Fox Kintner Plotkin & Kahn, PLLC, Washington, D.C., USA.
Healthc Financ Manage. 2003 Jan;57(1):46-52.
With the exception of small health plans, covered entities have less than four months to come into compliance with the final HIPAA privacy rule. Instead of obtaining written consent, providers must make a good-faith effort to obtain a patient's signed acknowledgment of receipt of the provider's notice of privacy practices. A covered entity may use patient information to market its own healthcare services without violating the privacy rule. A research institution may continue to use protected health information obtained with a valid authorization to maintain the integrity of a study even if authorization is revoked.
除小型健康计划外，受保实体有不到四个月的时间来遵守最终的《健康保险流通与责任法案》（HIPAA）隐私规则。提供者无需获得书面同意，而是必须真诚地努力获取患者签署的确认书，以确认其已收到提供者的隐私惯例通知。受保实体可以使用患者信息来推销自身的医疗服务，而不违反隐私规则。即使授权被撤销，研究机构也可以继续使用通过有效授权获得的受保护健康信息，以维持研究的完整性。
