Minimum Necessary
What can I access?
- Information you "need to know" to do your job
Does it apply in every situation?
- Treatment
- Patient
Accessing, using, or disclosing PHI on a need to know basis to get your job done is an important concept under HIPAA known as "minimum necessary." Working in a health care organization does not entitle a person to access any and all patient records in the organization. You can access only the information you need to know to get your job done.
Does the minimum necessary standard apply in every situation? No – the minimum necessary standard does not apply when accessing, using, or disclosing PHI for treatment of the individual. It also does not apply to the patient – they can have access to their protected health information.