§164.506(b) – Standard: Consent for uses and disclosures permitted.
§164.506(b)(1) A covered entity may obtain consent of the individual to use or disclose protected health information to carry out treatment, payment, or health care operations.
§164.506(b)(2) Consent, under paragraph (b) of this section, shall not be effective to permit a use or disclosure of protected health information when an authorization, under §164.508, is required or when another condition must be met for such use or disclosure to be permissible under this subpart.
Does the entity obtain the individual’s consent for uses and disclosures?
Obtain samples of completed consents, if any, and patient intake materials and review to determine if its use is consistent with the established performance criterion.