Failure to comply with the HIPAA Privacy Rule can have serious consequences to healthcare providers.
The HIPAA Privacy Rule gives individuals control over how their protected health information (PHI) may be used for marketing purposes. With limited exceptions, the Rule requires that written authorization must be obtained prior to using an individual’s PHI for marketing