I am a health care provider and my state law says I have to provide a workers’ compensation insurer, upon request, with an injured workers’ records that related to treatment or hospitalization for which compensation is being sought. Am I permitted to disclose the information required by my state law?
Yes. The HIPAA Privacy Rule permits a covered entity to disclose protected health information as necessary to comply with State law. No minimum necessary determination is required. See 45 CFR 164.512(a) and 164.502(b).