45 CFR § 164.502 - Uses and disclosures of protected health information: General rules

Publisher

Legal Information Institute (Cornell Law School), reproducing the eCFR

URL

https://www.law.cornell.edu/cfr/text/45/164.502

Published

unknown

Updated

unknown

Accessed

2026-10-01

HTTP status

200

License

US federal regulation text is public domain; public-domain regulatory text; short excerpts and locators only

Source notes citing this source

• A business associate may disclose PHI to a subcontractor only after obtaining satisfactory assurances that the subcontractor will appropriately safeguard the information. in context
• The satisfactory assurances required for business associates must be documented through a written contract or other written agreement or arrangement. in context
• A covered entity may disclose PHI to a business associate and let it create receive maintain or transmit PHI on its behalf only if it obtains satisfactory assurance that the business associate will appropriately safeguard the information. in context
• Covered entities and business associates must make reasonable efforts to limit PHI to the minimum necessary to accomplish the intended purpose of a use disclosure or request. in context

Cite this source record

APA

WarmTransfer. (2026, October 1). 45 CFR § 164.502 - Uses and disclosures of protected health information: General rules. WarmTransfer. https://warmtransfer.net/knowledge/sources/cornell-lii-45-cfr-164-502

BibTeX

@misc{warmtransfer-cornell-lii-45-cfr-164-502,
  title  = {45 CFR § 164.502 - Uses and disclosures of protected health information: General rules},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/cornell-lii-45-cfr-164-502},
  note   = {Legal Information Institute (Cornell Law School), reproducing the eCFR, accessed 2026-10-01}
}