§164.512(k)(2) National security and intelligence activities. A covered entity may disclose protected health information to authorized federal officials for the conduct of lawful intelligence, counter-intelligence, and other national security activities authorized by the National Security Act (50 U.S.C. 401, et seq.) and implementing authority (e.g., Executive Order 12333).

Audit Inquiry

How would the covered entity respond to a request for PHI from Federal officials for intelligence and other national security activities?

Obtain and review policies and procedures related to disclosures of PHI for national security purposes.