| (a) A covered entity may deliver a request for authorization
and an authorization form to a consumer as required by this subchapter:
(1) separately; or
(2) along with a policy, billing, an opt-out notice pursuant
to Subchapter A of this chapter, or other written communication, provided
that the request for authorization and the authorization form:
(A) are clear and conspicuous,
(B) are separate in content from any other accompanying written
communication, and
(C) require a separate signature on a signature line that is
not a part of any signature line relating to any of the other accompanying
written communication.
(b) A covered entity is not required to deliver, or include
in any other communications, an authorization form to the consumer unless
the covered entity intends to disclose protected health information pursuant
to §22.53 of this subchapter (relating to Authorization Required for
Disclosure of Nonpublic Personal Health Information).
(c) A covered entity must receive an authorization prior to
making any disclosures pursuant to that authorization.
|
