Under what circumstance can PHI be released to law enforcement?

The release of Protected Health Information (PHI) to law enforcement is permissible under specific conditions outlined by HIPAA regulations. A written request from law enforcement, detailing the patient's name along with the nature of an active investigation, establishes a legitimate basis for the disclosure of PHI. This requirement ensures that PHI is not released indiscriminately or based solely on verbal requests, thereby protecting patient privacy while still allowing for necessary communication with law enforcement when there is a legitimate investigation in progress.

There is a clear necessity for law enforcement to provide formal documentation in order to balance the need for information with the privacy rights of individuals. This stipulation helps safeguard against potential misuse of PHI and ensures that disclosures are made with appropriate justification. Hence, the requirement for a written request, specifying an active investigation, aligns with HIPAA’s emphasis on protecting patient confidentiality while allowing for necessary exceptions in law enforcement contexts.