Don't show this message again
42 U.S. Code § 1320d-6. Wrongful disclosure of individually identifiable health information
(a) OffenseA person who knowingly and in violation of this part—
(1)
uses or causes to be used a unique health identifier;
(2)
obtains individually identifiable health information relating to an individual; or
(3)
discloses individually identifiable health information to another person,
shall be punished as provided in subsection (b). For purposes of the previous sentence, a person (including an employee or other individual) shall be considered to have obtained or disclosed individually identifiable health information in violation of this part if the information is maintained by a covered entity (as defined in the HIPAA privacy regulation described in section 1320d–9(b)(3) of this title) and the individual obtained or disclosed such information without authorization.