HIPAA Glossary · Privacy Rule concepts
Incidental disclosure
A secondary disclosure that occurs despite reasonable safeguards — an overheard name at a pharmacy counter.
Context
Permitted at §164.502(a)(1)(iii), provided minimum necessary and reasonable safeguards were in place. The classic examples: another patient hearing a name in a waiting room, a sign-in sheet, a whiteboard with first-name-only initials. The permission is narrow and conditional, not blanket.
Related terms
- Minimum necessary — The standard requiring uses, disclosures, and requests to be limited to the least PHI needed for the purpose.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.