No. The Privacy Rule does include a general requirement that covered entities make reasonable efforts to
limit the disclosure of protected health information to the minimum necessary to accomplish the
intended purpose of the disclosure. See 45 CFR sec. 164.502(b)(1). However, there is a specific exception
to this requirement for disclosers that are required by law, such as the reporting of information about
cases of Parkinson’s disease to the CPDR pursuant to California law and regulations. See 45 CFR sec.
164.502(b)(2)(v).