Do I need to obtain patient written authorization to use or disclose PHI for marketing purposes?
Yes. Generally speaking, PHI may not be disclosed without the patient’s authorization. There are some instances where patient written authorization is not required. See Policy HS 9470 for more information or contact the Privacy and Information Security Offices at 310-794-8638 or PrivacyInfoSec@mednet.ucla.edu.