No. Reporting information about cases of Parkinson’s disease in accordance with the requirements of the
CDPH authorizing statute and regulations is permitted by HIPAA. The Privacy Rule contains a specifi c
provision authorizing covered entities to disclose protected health information as required by law. See 45
CFR sec. 164.512(a)(1). (Note: Covered entities include health plans, health care clearinghouses and
health care providers who conduct certain financial and administrative transactions electronically. These
electronic transactions are those for which standards have been adopted by the Secretary under HIPAA,
such as electronic billing and fund transfers.