"On November 3, 1999, the Department of Health and Human Services published over 600 pages of proposed regulations related to electronically stored and transmitted medical records.... The general rule is that covered entities be prohibited from using or disclosing health information except as authorized by the patient, or as explicitly permitted by the regulation. The regulation would permit use and disclosure of health information without authorization for purposes of health care treatment, payment and operations, and for specified national policy activities under conditions tailored for each type of such permitted use or disclosure. The regulations mandate the amount of information to be used or disclosed to be the minimum amount necessary to accomplish the relevant purpose."  MORE >>