§164.512(k)(2) National security and intelligence activities. A covered entity may disclose protected health information to authorized federal officials for the conduct of lawful intelligence, counter-intelligence, and other national security activities authorized by the National Security Act (50 U.S.C. 401, et seq.) and implementing authority (e.g., Executive Order 12333).
How would the covered entity respond to a request for PHI from Federal officials for intelligence and other national security activities?
Obtain and review policies and procedures related to disclosures of PHI for national security purposes.