# Tenn. Code Ann. § 8-27-910: Compliance with request or subpoena for information protected under HIPAA > Tennessee · Statutes · In force URL: https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-910 ## Section - **Citation:** Tenn. Code Ann. § 8-27-910 - **Heading:** Compliance with request or subpoena for information protected under HIPAA - **Jurisdiction:** Tennessee - **Kind:** Statutes - **Status:** In force - **Text as of:** August 14, 2026 - **Source:** Compiled text - **Location:** TN Code / Title 8 / Chapter 27 / Section 8-27-910 ## Text (a) A covered entity, whether public or private, shall comply with a request or subpoena for information protected under the federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) ( 42 U.S.C. § 1320d et seq.) when the request or subpoena: (1) Is made by: (A) An individual, who is not the subject of the information; (B) The individual's guardian, power of attorney, or executor of the individual's estate; (C) An attorney, (D) A private entity, or (E) A law enforcement agency; (2) Is accompanied by a qualified protective order signed by the court in which the matter is pending; and (3) Provides sufficient notice as described in subsection (c). (b) As used in this section: (1) "Covered entity" has the same meaning as defined in the federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) ( 42 U.S.C. § 1320d et seq.); and (2) "Qualified protective order" means: (A) An order of a court, administrative judge, or tribunal, or a stipulation by the parties to the litigation or administrative proceeding, that (i) Prohibits a party from using or disclosing protected health information for a purpose other than the litigation or proceeding for which the information was requested; and (ii) Requires the return to the individual who is the subject of the protected information or the individual's counsel of, or destruction of, the protected health information, including all copies made, at the end of the litigation or proceeding; or (B) A subpoena that: (i) Is signed by the court in which the matter is pending; and (ii) Provides sufficient notice as described in subsection (c). (c) (1) To provide sufficient notice under this section, the party seeking protected health information must provide to the covered entity a written and notarized statement and accompanying documentation indicating that reasonable efforts have been made to: (A) Ensure that an individual who is the subject of the information requested has been notified of the request, or (B) Secure a qualified protective order for the information. (2) The notice described in subdivision (c)(1) must include sufficient detail to permit the individual who is the subject of the information requested to identify the court in which the matter for which the information sought is pending, and raise an objection with the court. (3) The notarized statement described in subdivision (c)(1) must require that the party seeking protected health information file a separate statement and accompanying documentation demonstrating: (A) That a period of forty-five (45) days has lapsed since the individual was provided with the notice; and (B) (i) The individual or the individual's representative has not filed an objection; or (ii) If an objection has been filed, the filed objections have been resolved by the court and the disclosures being sought are consistent with that resolution. (d) A local government entity may opt out of the requirements of this section upon passage of a resolution by a simple majority vote of the entity's governing body. Added by 2022 Tenn. Acts, ch. 674,s 1, eff. 3/18/2022. led an objection; or (ii) If an objection has been filed, the filed objections have been resolved by the court and the disclosures being sought are consistent with that resolution. (d) A local government entity may opt out of the requirements of this section upon passage of a resolution by a simple majority vote of the entity's governing body. Added by 2022 Tenn. Acts, ch. 674,s 1, eff. 3/18/2022. (a) A covered entity, whether public or private, shall comply with a request or subpoena for information protected under the federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) ( 42 U.S.C. § 1320d et seq.) when the request or subpoena: (1) Is made by: (A) An individual, who is not the subject of the information; (B) The individual's guardian, power of attorney, or executor of the individual's estate; (C) An attorney, (D) A private entity, or (E) A law enforcement agency; (2) Is accompanied by a qualified protective order signed by the court in which the matter is pending; and (3) Provides sufficient notice as described in subsection (c). (1) Is made by: (A) An individual, who is not the subject of the information; (B) The individual's guardian, power of attorney, or executor of the individual's estate; (C) An attorney, (D) A private entity, or (E) A law enforcement agency; (A) An individual, who is not the subject of the information; (B) The individual's guardian, power of attorney, or executor of the individual's estate; (C) An attorney, (D) A private entity, or (E) A law enforcement agency; (2) Is accompanied by a qualified protective order signed by the court in which the matter is pending; and (3) Provides sufficient notice as described in subsection (c). (b) As used in this section: (1) "Covered entity" has the same meaning as defined in the federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) ( 42 U.S.C. § 1320d et seq.); and (2) "Qualified protective order" means: (A) An order of a court, administrative judge, or tribunal, or a stipulation by the parties to the litigation or administrative proceeding, that (i) Prohibits a party from using or disclosing protected health information for a purpose other than the litigation or proceeding for which the information was requested; and (ii) Requires the return to the individual who is the subject of the protected information or the individual's counsel of, or destruction of, the protected health information, including all copies made, at the end of the litigation or proceeding; or (B) A subpoena that: (i) Is signed by the court in which the matter is pending; and (ii) Provides sufficient notice as described in subsection (c). (1) "Covered entity" has the same meaning as defined in the federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) ( 42 U.S.C. § 1320d et seq.); and rmation, including all copies made, at the end of the litigation or proceeding; or (B) A subpoena that: (i) Is signed by the court in which the matter is pending; and (ii) Provides sufficient notice as described in subsection (c). (1) "Covered entity" has the same meaning as defined in the federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) ( 42 U.S.C. § 1320d et seq.); and (2) "Qualified protective order" means: (A) An order of a court, administrative judge, or tribunal, or a stipulation by the parties to the litigation or administrative proceeding, that (i) Prohibits a party from using or disclosing protected health information for a purpose other than the litigation or proceeding for which the information was requested; and (ii) Requires the return to the individual who is the subject of the protected information or the individual's counsel of, or destruction of, the protected health information, including all copies made, at the end of the litigation or proceeding; or (B) A subpoena that: (i) Is signed by the court in which the matter is pending; and (ii) Provides sufficient notice as described in subsection (c). (A) An order of a court, administrative judge, or tribunal, or a stipulation by the parties to the litigation or administrative proceeding, that (i) Prohibits a party from using or disclosing protected health information for a purpose other than the litigation or proceeding for which the information was requested; and (ii) Requires the return to the individual who is the subject of the protected information or the individual's counsel of, or destruction of, the protected health information, including all copies made, at the end of the litigation or proceeding; or (i) Prohibits a party from using or disclosing protected health information for a purpose other than the litigation or proceeding for which the information was requested; and (ii) Requires the return to the individual who is the subject of the protected information or the individual's counsel of, or destruction of, the protected health information, including all copies made, at the end of the litigation or proceeding; or (B) A subpoena that: (i) Is signed by the court in which the matter is pending; and (ii) Provides sufficient notice as described in subsection (c). (i) Is signed by the court in which the matter is pending; and (ii) Provides sufficient notice as described in subsection (c). (c) (1) To provide sufficient notice under this section, the party seeking protected health information must provide to the covered entity a written and notarized statement and accompanying documentation indicating that reasonable efforts have been made to: (A) Ensure that an individual who is the subject of the information requested has been notified of the request, or (B) Secure a qualified protective order for the information. (2) The notice described in subdivision (c)(1) must include sufficient detail to permit the individual who is the subject of the information requested to identify the court in which the matter for which the information sought is pending, and raise an objection with the court. (3) The notarized statement described in subdivision (c)(1) must require that the party seeking protected health information file a separate statement and accompanying documentation demonstrating: (A) That a period of forty-five (45) days has lapsed since the individual was provided with the notice; and (B) (i) The individual or the individual's representative has not filed an objection; or (ii) If an objection has been filed, the filed objections have been resolved by the court and the disclosures being sought are consistent with that resolution. d accompanying documentation demonstrating: (A) That a period of forty-five (45) days has lapsed since the individual was provided with the notice; and (B) (i) The individual or the individual's representative has not filed an objection; or (ii) If an objection has been filed, the filed objections have been resolved by the court and the disclosures being sought are consistent with that resolution. (1) To provide sufficient notice under this section, the party seeking protected health information must provide to the covered entity a written and notarized statement and accompanying documentation indicating that reasonable efforts have been made to: (A) Ensure that an individual who is the subject of the information requested has been notified of the request, or (B) Secure a qualified protective order for the information. (A) Ensure that an individual who is the subject of the information requested has been notified of the request, or (B) Secure a qualified protective order for the information. (2) The notice described in subdivision (c)(1) must include sufficient detail to permit the individual who is the subject of the information requested to identify the court in which the matter for which the information sought is pending, and raise an objection with the court. (3) The notarized statement described in subdivision (c)(1) must require that the party seeking protected health information file a separate statement and accompanying documentation demonstrating: (A) That a period of forty-five (45) days has lapsed since the individual was provided with the notice; and (B) (i) The individual or the individual's representative has not filed an objection; or (ii) If an objection has been filed, the filed objections have been resolved by the court and the disclosures being sought are consistent with that resolution. (A) That a period of forty-five (45) days has lapsed since the individual was provided with the notice; and (B) (i) The individual or the individual's representative has not filed an objection; or (ii) If an objection has been filed, the filed objections have been resolved by the court and the disclosures being sought are consistent with that resolution. (i) The individual or the individual's representative has not filed an objection; or (ii) If an objection has been filed, the filed objections have been resolved by the court and the disclosures being sought are consistent with that resolution. (d) A local government entity may opt out of the requirements of this section upon passage of a resolution by a simple majority vote of the entity's governing body. Added by 2022 Tenn. Acts, ch. 674,s 1, eff. 3/18/2022. ## Nearby sections - [Tenn. Code Ann. § 8-27-101 "Committees" defined - Administrative duties of division of benefits administration - Promulgation of rules](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-101.md) - [Tenn. Code Ann. § 8-27-102 Resolution of disputes regarding eligibility and enrollment for plans and benefit structure - Appeals regarding voluntary benefits](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-102.md) - [Tenn. Code Ann. § 8-27-103 Authority to enter into contracts necessary to administer plans - Participation with health maintenance organizations](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-103.md) - [Tenn. Code Ann. § 8-27-104 "Voluntary benefits" defined for purposes of parts 1, 2, 3 and 7](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-104.md) - [Tenn. Code Ann. § 8-27-201 State insurance committee created - Members - Vacancies - Alternative representative](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-201.md) - [Tenn. Code Ann. § 8-27-202 Group insurance plan - Authority of committee - Authorized components of plan](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-202.md) - [Tenn. Code Ann. § 8-27-203 Responsibility for payment of premiums](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-203.md) - [Tenn. Code Ann. § 8-27-204 Eligibility for plans - Temporarily disabled employees - Dependents](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-204.md) - [Tenn. Code Ann. § 8-27-205 Health benefit for retired state employees - Schedule of premiums - Disabled retirees - Dependents of retirees - Applicability - Implementation of defined contribution plan or related investment vehicle](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-205.md) - [Tenn. Code Ann. § 8-27-206 Group life insurance plan for national guard members - Payment of premiums - Eligibility of surviving spouse and dependent children to participate in plan under Section 8-27-202](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-206.md) - [Tenn. Code Ann. § 8-27-207 State employees killed in performance of duty - Coverage of surviving spouse and dependents](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-207.md) - [Tenn. Code Ann. § 8-27-208 Election by senator, representative or governor to retain group insurance upon retirement or completion of term - Election by surviving spouse or dependent children - Retention of health insurance if person is convicted of a felony](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-208.md) - [Tenn. Code Ann. § 8-27-209 Supplemental medical insurance for retired state employees and teachers covered by Medicare benefits](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-209.md) - [Tenn. Code Ann. § 8-27-210 First responders killed in line of duty - Coverage of surviving spouse and dependents](https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-210.md) --- Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/STATE_TN_T8_C27_S8-27-910. Check the current official text before relying on it. Not legal advice.