HIPAA Privacy Rule 164.512: Uses and disclosures for which authorization or opportunity to agree or object is not required

A covered entity may use or disclose PHI without authorization for the twelve national-priority purposes in 164.512: required by law, public health activities, victims of abuse or neglect, health oversight activities, judicial and administrative proceedings, law enforcement purposes, decedents, cadaveric donation, research (with a waiver, IRB or privacy board approval, or other 164.512(i) basis), to avert a serious threat to health or safety, specialised government functions, and workers' compensation.