"Covered Entities and Business Associates, when receiving a request for PHI related to reproductive health care, must obtain a signed attestation that the use or disclosure is not for one of the prohibited purposes ... The attestation requirement applies when the request is for: [1] Health oversight activities; [2] Judicial and administrative proceedings; [3] Law enforcement purposes; [4] Disclosures to coroners or medical examiners."  MORE >>