Welcome to HIPAA 2010! Anyone who expects to be paid for patient services has full access to patient info, without prior patient authorization. HIPAA privacy regulations do not require you to obtain patients? consent to use their PHI for routine disclosures, such as those related to treatment, payment or health care operations (TPO).
