OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.512

164.512(e)(1)(vi)

paragraph (action item)

Notwithstanding paragraph (e)(1)(ii) of this section, a covered entity may disclose protected health information in response to lawful process described in paragraph (e)(1)(ii) of this section without receiving satisfactory assurance under paragraph (e)(1)(ii)(A) or (B) of this section, if the covered entity makes reasonable efforts to provide notice to the individual sufficient to meet the requirements of paragraph (e)(1)(iii) of this section or to seek a qualified protective order sufficient to meet the requirements of paragraph (e)(1)(v) of this section.

164.512 Uses and disclosures for which an authorization or opportunity to agree or object is not required.

Related Frameworks

1 mapping across 2 frameworks
SCF1 mapping
DCH-03.1Disclosure of Information
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (51) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-22Publicly Accessible Content
1.00
AT-1Policy and Procedures
1.00
AT-2Literacy Training and Awareness
1.00
AT-3(5)Processing Personally Identifiable Information
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CM-1Policy and Procedures
1.00
CP-1Policy and Procedures
1.00
CP-2Contingency Plan
1.00

+41 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.