Jubal.med
For privacy officers

Privacy and security, answered from Part 164 itself.

The disclosure calls that come up daily — what the rule permits without authorization, what it requires, and what a patient can demand — cited to the provision, not to a policy summary.

On file

The sections that govern you.

Retrieved on demand from 45 C.F.R. §§ 160, 164 and quoted verbatim — never summarized from memory, never a guessed cite.

45 C.F.R. § 164.308

Administrative safeguards

45 C.F.R. § 164.502

Uses and disclosures of protected health information: General rules

45 C.F.R. § 164.508

Uses and disclosures for which an authorization is required

45 C.F.R. § 164.524

Access of individuals to protected health information

Ask it like this

In your words, not the regulation’s.

You ask the way you’d ask a colleague. Jubal med translates into the corpus’s terms of art and runs several probes.

  • Can we disclose this to the family member standing at the desk?
  • When is an authorization required, and what must it contain?
  • How long do we have to respond to a records request, and what may we charge?
What’s on file, and what isn’t

HIPAA questions cross every setting. The privacy and security rules are on file in full; OCR sub-regulatory guidance is not.

Other settings
HospiceSkilled nursing & long-term careHome healthHospitalsDialysis & ESRDAmbulatory surgery centersCritical access hospitalsPACE programs

Bring your hardest surveyor question.

Invite-only, with founding rates for early members. When someone tells you what the rules say, Jubal med shows you what the rules actually require.