Print this page


HIPAA (Health Insurance Portability and Accountability Act of 1996) provides regulatory guidance on how healthcare providers, including Indiana University Health, may use and disclose protected health information for a patient to carry out treatment, payment, or health care operations activities.

In addition, the regulation specifies the rights patients have on their ability to inspect, copy, and amend their health information as well as their right to request a restriction or limitation on the ways their health information may be used or disclosed by IU Health.

Patients also have a right to request a list of disclosures IU Health has made of their health information, excluding disclosures for treatment, payment, healthcare operations, or other disclosures patients have authorized in writing.