OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.512

164.512(f)(2)(ii)

paragraph (action item)

Except as permitted by paragraph (f)(2)(i) of this section, the covered entity may not disclose for the purposes of identification or location under paragraph (f)(2) of this section any protected health information related to the individual's DNA or DNA analysis, dental records, or typing, samples or analysis of body fluids or tissue.

164.512 Uses and disclosures for which an authorization or opportunity to agree or object is not required.

Related Frameworks

1 mapping across 2 frameworks
SCF1 mapping
DCH-03.1Disclosure of Information
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (51) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-22Publicly Accessible Content
1.00
AT-1Policy and Procedures
1.00
AT-2Literacy Training and Awareness
1.00
AT-3(5)Processing Personally Identifiable Information
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CM-1Policy and Procedures
1.00
CP-1Policy and Procedures
1.00
CP-2Contingency Plan
1.00

+41 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.