HIPAA Glossary · Privacy Rule concepts
Accounting of disclosures
The individual's right to a list of certain disclosures of their PHI made in the prior six years.
Context
Required by §164.528. Excludes TPO, disclosures to the individual, incidental disclosures, and several other categories — which is often most of what an entity does. Still, the categories that must be tracked (public health reporting, law enforcement, judicial proceedings, research) require systems that most routine EHRs do not natively capture.
Related terms
- TPO — The three purposes for which PHI may be used and disclosed without patient authorisation.
- Right of access — The individual's right to inspect and obtain a copy of their PHI in the designated record set, generally within 30 days and at limited cost.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.