> HIPAA has a rule that permits disclosure of PHI for health care operations, treatment, and payment. I think this is what the GP was referring to. It's not ju

> HIPAA has a rule that permits disclosure of PHI for health care operations, treatment, and payment. I think this is what the GP was referring to. It's not just for care but for payment and operations too. A few operational examples, in the case of pharmacies, they must make sure that a patient doesn't fill the same prescription twice. Health insurance companies receive clinical data from health care providers for the purposes of HEDIS reporting. Don't forget, the second P in HIPPA is portability.