Frequently Asked Questions

  • Do North Carolina local health departments need written permission to disclose PHI for purposes of treatment, payment, and health care operations? VIEW (pdf)
  • What are the HIPAA "Administrative Simplification" regulations? VIEW
  • Who is required to comply with the HIPAA Administrative Simplification regulations? VIEW
  • Is the county the "covered entity" or is each individual department a "covered entity"? VIEW
  • What is a "hybrid entity" and how is it relevant to local governments? VIEW
  • Who should submit a "compliance plan" to DHHS to obtain a one-year extension for compliance with the Transactions and Code Sets regulations? VIEW
  • Are local environmental health programs required to comply with the HIPAA medical privacy regulation? VIEW
  • What are a covered entity’s obligations regarding the individual right to an accounting of disclosures of protected health information? VIEW (pdf)
  • How does the HIPAA Privacy Rule apply to schools? VIEW
  • Who may present a child for immunizations at a local health department and sign forms related to those immunizations (such as the acknowledgment of receipt of the notice of privacy practices)? VIEW