The Office of Civil Rights (OCR), the agency that is responsible for HIPAA Privacy Rule compliance and support, has just posted a new FAQ addressing the question, "May a health plan disclose protected health information to a person who calls on the beneficiary’s behalf?" If you are responsible for HIPAA compliance, or just curious, I encourage you to monitor the OCR site for the many interesting and useful messages the post regarding HIPAA issues.
Technorati Tags
HIPAA compliance
HIPAA faq
HIPAA
Privacy Rule