Minimum Necessary Policy Term Definition

When using or disclosing PHI or when requesting PHI from another health care provider or health organization, UTMB personnel must limit PHI to the minimum necessary to accomplish the intended purpose of the use, disclosure or request.  Minimum necessary does not apply in the following circumstances:

1. Disclosures by a health care provider for treatment (students and trainees are included as health care providers for this purpose)
2. Uses and Disclosures based upon a valid authorization to use and disclose PHI
3. Disclosures made to the Secretary of Health and Human Services
4. Uses and Disclosures required by law;
5. Uses and Disclosures required by other sections of the HIPAA privacy regulations.