# HHS OCR HIPAA Guidance: Fast Facts for Covered Entities: Fast Facts for Covered Entities > Federal · Agency guidance · In force URL: https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_FAST_FACTS ## Section - **Citation:** HHS OCR HIPAA Guidance: Fast Facts for Covered Entities - **Heading:** Fast Facts for Covered Entities - **Jurisdiction:** Federal - **Kind:** Agency guidance - **Status:** In force - **Text as of:** August 14, 2026 - **Source:** Compiled text - **Location:** HHS OCR HIPAA Guidance Materials / Fast Facts for Covered Entities ## Text The Privacy Rule provides federal protections for personal health information held by covered entities, and gives patients an array of rights with respect to that information. At the same time, the Privacy Rule is balanced so that it permits the disclosure of personal health information needed for patient care and other important purposes. The Privacy Rule does not require you to obtain a signed consent form before sharing information for treatment purposes. Health care providers can freely share information for treatment purposes without a signed patient authorization. The Privacy Rule does not require you to eliminate all incidental disclosures. The Privacy Rule recognizes that it is not practicable to eliminate all risk of incidental disclosures.  In August 2002, specific modifications to the Rule were adopted to clarify that incidental disclosures do not violate the Privacy Rule when you have policies which reasonably safeguard and appropriately limit how protected health information is used and disclosed. The Privacy Rule does not cut off all communications between you and the families and friends of patients. As long as the patient does not object, The Privacy Rule permits you to: share needed information with family, friends, or anyone else a patient identifies as involved in his or her care; disclose information when needed to notify a family member or anyone responsible for the patient's care about the patient's location or general condition; share the appropriate information for these purposes even when the patient is incapacitated if doing so is in the best interest of the patient. The Privacy Rule does not stop calls or visits to hospitals by family, friends, clergy or anyone else disclose information when needed to notify a family member or anyone responsible for the patient's care about the patient's location or general condition; share the appropriate information for these purposes even when the patient is incapacitated if doing so is in the best interest of the patient. The Privacy Rule does not stop calls or visits to hospitals by family, friends, clergy or anyone else. Unless the patient objects, basic information such as phone number, room number and general condition can: be listed in the hospital directory; be given to people who call or visit and ask for the patient; be given to clergy along with religious affiliation--when provided by the patient--even if the patient is not asked for by name. The Privacy Rule does not prevent child abuse reporting. You may continue to report child abuse or neglect to appropriate government authorities. The Privacy Rule is not anti-electronic. You can communicate with patients, providers, and others by e-mail, telephone, or facsimile, with the implementation of appropriate safeguards to protect patient privacy. Please view our Frequently Asked Questions about the Privacy Rule. Guidance Materials for Covered Entities Summary of the Privacy Rule Guidance on Significant Aspects of the Privacy Rule Fast Facts for Covered Entities Provider Guide: Communicating With a Patient's Family, Friends, or Other Persons Identified by the Patient Guidance on the Application of FERPA and HIPAA to Student Health Records Sample Business Associate Contract Misleading Marketing Claims Sign Up for the OCR Privacy Listserv ## Nearby sections - [HHS OCR HIPAA Guidance: Administrative Safeguards Administrative Safeguards](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_ADMINSAFEGUARDS.md) - [HHS OCR HIPAA Guidance: Basics of Risk Analysis and Risk Management Basics of Risk Analysis and Risk Management](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_RISKASSESSMENT.md) - [HHS OCR HIPAA Guidance: Bulletin on Online Tracking Technologies Bulletin on Online Tracking Technologies](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_HIPAA_ONLINE_TRACKING.md) - [HHS OCR HIPAA Guidance: Care Coordination and Continuity of Care Care Coordination and Continuity of Care](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_USES_AND_DISCLOSURES_FOR_CARE_COORDINATION_AND_CONTINUITY_OF_CARE.md) - [HHS OCR HIPAA Guidance: Designation of Regional Privacy Advisors Designation of Regional Privacy Advisors](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_DESIGNATION_OF_REGIONAL_OFFICE_PRIVACY_ADVISORS.md) - [HHS OCR HIPAA Guidance: Fall 2019 OCR Cybersecurity Newsletter: What Happened to My Data?: Update on Preventing, Mitigating and Responding to Ransomware Fall 2019 OCR Cybersecurity Newsletter: What Happened to My Data?: Update on Preventing, Mitigating and Responding to Ransomware](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_CYBERSECURITY_NEWSLETTER_FALL_2019.md) - [HHS OCR HIPAA Guidance: Fall 2021 OCR Cybersecurity Newsletter: Securing Your Legacy [System Security] Fall 2021 OCR Cybersecurity Newsletter: Securing Your Legacy [System Security]](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_CYBERSECURITY_NEWSLETTER_FALL_2021.md) - [HHS OCR HIPAA Guidance: Fast Facts for Covered Entities Fast Facts for Covered Entities](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_FAST_FACTS.md) - [HHS OCR HIPAA Guidance: Frequently Asked Questions About Family Medical History Information Frequently Asked Questions About Family Medical History Information](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_FAMILYHEALTHHISTORYFAQS.md) - [HHS OCR HIPAA Guidance: Frequently Asked Questions About the Disposal of Protected Health Information Frequently Asked Questions About the Disposal of Protected Health Information](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_DISPOSALFAQS.md) - [HHS OCR HIPAA Guidance: Guidance on HIPAA and Audio-Only Telehealth Guidance on HIPAA and Audio-Only Telehealth](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_HIPAA_AUDIO_TELEHEALTH.md) - [HHS OCR HIPAA Guidance: Guidance on HIPAA and Workplace Wellness Programs Guidance on HIPAA and Workplace Wellness Programs](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_WORKPLACE_WELLNESS.md) - [HHS OCR HIPAA Guidance: Guidance on Significant Aspects of the Privacy Rule Guidance on Significant Aspects of the Privacy Rule](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_SIGNIFICANT_ASPECTS.md) - [HHS OCR HIPAA Guidance: HIPAA and the FTC Act HIPAA and the FTC Act](https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_HIPAA_FTC_ACT.md) --- Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/HHS_OCR_HIPAA_GUIDANCE_FAST_FACTS. Check the current official text before relying on it. Not legal advice.