HIPAA Disclosures as Required by Law – by What Law? How do I know ‘That Law?’

07/17/2026
Live Webinar
104 day
10 hr
30 min
47 sec

The HIPAA Privacy Rule sets national standards for the protection of individuals’ protected health information (PHI) held by “covered entities” such as health care providers, health plans, and health care clearinghouses.

While the Privacy Rule generally prohibits uses or disclosures of PHI without patient authorization, it also recognizes that other laws may legitimately require or permit such disclosures without individual consent.

One of the key challenges for covered entities is determining how state law requirements interact with HIPAA’s standards. Some state laws require patients’ informed consent before a provider can use or disclose their health information. Covered entities may wonder whether the HIPAA Privacy Rule overrides or preempts these state protections.

The Health and Human Services office clarifies that HIPAA does not take away state law protections and that covered entities may still obtain and must comply with state consent requirements where they exist. HIPAA does not prohibit a covered entity from obtaining an individual’s consent before using or disclosing PHI nor does it create a barrier to complying with a state law that mandates consent for such disclosures. In effect, state laws that provide greater privacy protections than HIPAA remain valid, and covered entities must honor them alongside HIPAA’s own requirements.

Another important situation involves disclosures to Protection and Advocacy (P&A) systems. Under federal statutes such as the Developmental Disabilities Assistance, Bill of Rights Act, and the Protection and Advocacy for Individuals with Mental Illness Act, states designate Protection and Advocacy systems to safeguard the rights of individuals with certain disabilities.

These laws require access to records in specific circumstances, such as investigating abuse, neglect, or violations of rights. HIPAA’s Privacy Rule recognizes that when a federal, state, or other law mandates such disclosures, covered entities may release PHI without the individual’s authorization to the designated P&A system — to the extent that the disclosure is required by that law and complies with its requirements.

Importantly, when a disclosure is “required by law” — whether by federal statute or a state requirement — the usual HIPAA minimum necessary standard does not limit the scope of information that may be disclosed if the governing law dictates the extent of the disclosure. Covered entities cannot use HIPAA as a reason to refuse to comply with other legal obligations: if another law compels a disclosure of PHI, the covered entity must comply with that law’s terms while also applying HIPAA’s safeguards and procedural requirements where appropriate.

In summary, HIPAA’s Privacy Rule establishes baseline protections for PHI, but it also anticipates and accommodates the existence of other laws that may require disclosures without patient authorization. Covered entities must be able to identify when such laws apply — whether state consent laws or federal statutes regarding Protection and Advocacy systems — and ensure that PHI is disclosed in conformity with both HIPAA and the applicable law.

Areas Covered in the Session

  • HIPAA Privacy Rule and the general rule against unauthorized PHI disclosures
  • How state laws interact with HIPAA disclosure requirements
  • Whether HIPAA preempts or overrides state laws
  • Federal statutes that mandate disclosures to Protection and Advocacy systems
  • Definition of ‘required by law’
  • HIPAA’s minimum necessary: where it does and does not apply
  • Compliance considerations
  • Examples Under State Law for Duty to Warn and Duty to Report Child or Adult Abuse or Neglect

Why should you Attend?

Any healthcare practitioner may at one point or another be required to disclose certain PHI according to federal or state law; this webinar helps guide you through it.

Who will Benefit?

All healthcare workers

Date: 07/17/2026

Time: 12:00 pm - 1:00 pm (EST)

Reg. deadline: 07/16/2026

Venue: Live Webinar

Enrollment option

Speaker

Mark R. Brengelman
Mark holds Bachelor’s and Master’s degrees in Philosophy from Emory University and a Juris Doctorate from the University of Kentucky. Retiring as an Assistant Attorney General, he now represents: health care professionals; two government health care licensure boards; a government ethics commission, and; parents and kids in confidential child abuse and neglect cases, termination of…

Related Events

Excel: Practical Pivot Tables for Fast and Flexible Reporting
Compliance Webinars
Live Webinar

Excel: Practical Pivot Tables for Fast and Flexible Reporting

Pivot Tables are one of Excel’s most powerful and misunderstood tools but once you know how to use them, they can transform how you analyse and report on data. In just a few clicks, you can summarise thousands of rows into meaningful, dynamic reports - no formulas required. This session will show you how to quickly create and customise Pivot Tables to reveal trends, answer questions, and support better decision-making. You’ll also discover how to turn your Pivot Table into a visual dashboard using built-in charting tools, slicers, and layout options. If you've ever looked at a Pivot Table and thought, “I should really learn that”, this is your moment. Why you should attend Manually building summaries and reports from Excel data is time-consuming and error-prone. Pivot Tables eliminate the guesswork, automate the process, and give you instant insights. This session is perfect if you want to save time, reduce complexity, and finally get confident with one of Excel’s most powerful (but underused) features. Topics covered How to structure your source data for best results Creating Pivot Tables in just a few clicks Summarising data with totals, counts, and percentages Formatting your Pivot Table for clarity and impact Sorting and filtering with built-in tools and slicers Visualising data using Pivot Charts Understanding and using (or avoiding) GETPIVOTDATA Who should attend This session is for anyone who wants to level up their Excel skills and gain confidence with Pivot Tables. It’s ideal for professionals in admin, finance, HR, operations, or anyone who builds regular reports. You should be comfortable with basic Excel tasks like entering data, using copy/paste, and applying simple formatting. The training is delivered using Excel for Windows (Microsoft 365), but most techniques also apply to earlier versions and Excel for Mac.

Care of the LGBTQI + Patient and their Families:   Policies, Procedures, & Practices
Compliance Webinars
Live Webinar

Care of the LGBTQI + Patient and their Families: Policies, Procedures, & Practices

Whether your employer is a clinic, a hospital, home health, or long term care; whether you are an MD, RN, an occupational therapist, a receptionist, or in the C-Suite, approximately 5% - 10% of your patients may be gay, lesbian, or bisexual. Additional patients may be transgender, intersex, or questioning their gender identity or sexual orientation. The healthcare needs of GLBT patients may appear to be the same as other patients’, but institutionalized heterosexism in healthcare is a real barrier to quality care. Healthcare providers acknowledge they are serving more GLBT patients, and that they want to provide quality GLBT care, but aren’t sure how to best create and implement the policies, procedures, and practices to ensure best patient outcomes. GLBT patients face a multitude of barriers to equitable care such as: refusals of care, delayed or substandard care, mistreatment, inequitable policies and practices, end-of-life issues, and limits on visitation. The challenges begin from the beginning of the health professionals’ relationship with their GLBT patient—starting from asking them to identify if they are male or female, married or single, on their intake form. Objectives To list relevant laws, regulations and standards required for health equity and patient-centered care of GLBT patients To identify key policy, procedure and practice issues related to GLBT patients and their families to incorporate into already existing policies, procedures and practices To discuss opportunities to collect GLBT – relevant data and information during the healthcare encounter To identify or revise strategic community outreach efforts to the GLBT population To name a variety of resources Who should Attend? HR Management Nurses Other Health Professionals  

Effective Decision Making: A Critical Skill for Managers
Compliance Webinars
Live Webinar

Effective Decision Making: A Critical Skill for Managers

Everyone makes decisions, but of course some decisions are more important and complex than others. Whether it is a decision about what to wear to work to deciding on a merger, the decision making process is generally the same. Most decision making by management is convoluted with much fuzziness and backtracking. Research suggests that managers put little thought into the decision making process such as—analysis of the risk, what values are poignant, the alternatives evaluated, quantitative and qualitative data, identifying the stakeholders, bias, and the impact of the decision on the system, to name a few. Decision making is the basic foundation of the process of management. Yet most management training and development tactics ignore this essential skill. Learning Objectives To examine the “act of choice” To analyze roadblocks to effective decision making To discuss 10 decision making/problem solving tools To list the various models of decision making Analyze how managers make decisions Who should Attend? HR Management Any Employee

Engaging Your Team in Critical Thinking
Compliance Webinars
Live Webinar

Engaging Your Team in Critical Thinking

It is our nature to think—we all do it, obviously. However, a good share of our thinking is biased, distorted, or incomplete. Critical thinking is an essential skill for both managers and employees. Few of us are effective critical thinkers though research suggests that leaders believe they think quite well. Critical thinking ensures we pose the right questions, view others’ viewpoints with merit, and challenge assumptions in strategic thinking, decision making and problem solving. Non-critical thinkers shoot down ideas before they are understood, or take action based on faulty assumptions resulting in a business disaster. Teams, as well as individuals, must learn to think critically which requires a work atmosphere that is conducive to challenging others’ perspectives. Critical thinking enables teams to develop positive insights and ideas that lead to effective action. It focuses on reframing and rethinking issues so that the right problems are addressed, and requires challenging conventional wisdom. Using the process of critical thinking leads to reasoned conclusions, better decisions, fewer mistakes, and improves collaboration among team members. Learning Objectives Define critical thinking List characteristics of critical thinkers Examine the critical thinking process Explore the elements of reasoning Discuss critical thinking techniques Identify organizational, team, and individual critical thinking barriers Who should Attend? HR Management Any Employee