--- title: "45 CFR 164.510 HIPAA: Uses and disclosures requiring an opportunity for the individual to agree or to object" canonical: "https://dposchool.com/hipaa/section/164.510" source: "https://www.ecfr.gov/current/title-45/section-164.510" source_note: "Source: United States Code, title 42, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: United States Code, title 42, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: Electronic Code of Federal Regulations (eCFR), title 45, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR." text_as_of: "2026-10-29" language: "en" publisher: "DPO School" --- 45 CFR 164.510 HIPAA · Part 164: SECURITY AND PRIVACY · Subpart E: Privacy of Individually Identifiable Health Information # 45 CFR 164.510 HIPAA: Uses and disclosures requiring an opportunity for the individual to agree or to object eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026. ## Official text A covered entity may use or disclose protected health information, provided that the individual is informed in advance of the use or disclosure and has the opportunity to agree to or prohibit or restrict the use or disclosure, in accordance with the applicable requirements of this section. The covered entity may orally inform the individual of and obtain the individual's oral agreement or objection to a use or disclosure permitted by this section. ### 45 CFR 164.510(a) **(a)** Standard: Use and disclosure for facility directories—(1) Permitted uses and disclosure. Except when an objection is expressed in accordance with paragraphs (a)(2) or (3) of this section, a covered health care provider may: ##### 45 CFR 164.510(a)(i) **(i)** Use the following protected health information to maintain a directory of individuals in its facility: ###### 45 CFR 164.510(a)(i)(A) **(A)** The individual's name; ###### 45 CFR 164.510(a)(i)(B) **(B)** The individual's location in the covered health care provider's facility; ###### 45 CFR 164.510(a)(i)(C) **(C)** The individual's condition described in general terms that does not communicate specific medical information about the individual; and ###### 45 CFR 164.510(a)(i)(D) **(D)** The individual's religious affiliation; and ##### 45 CFR 164.510(a)(ii) **(ii)** Use or disclose for directory purposes such information: ###### 45 CFR 164.510(a)(ii)(A) **(A)** To members of the clergy; or ###### 45 CFR 164.510(a)(ii)(B) **(B)** Except for religious affiliation, to other persons who ask for the individual by name. #### 45 CFR 164.510(a)(2) **(2)** Opportunity to object. A covered health care provider must inform an individual of the protected health information that it may include in a directory and the persons to whom it may disclose such information (including disclosures to clergy of information regarding religious affiliation) and provide the individual with the opportunity to restrict or prohibit some or all of the uses or disclosures permitted by paragraph (a)(1) of this section. #### 45 CFR 164.510(a)(3) **(3)** Emergency circumstances. (i) If the opportunity to object to uses or disclosures required by paragraph (a)(2) of this section cannot practicably be provided because of the individual's incapacity or an emergency treatment circumstance, a covered health care provider may use or disclose some or all of the protected health information permitted by paragraph (a)(1) of this section for the facility's directory, if such disclosure is: ###### 45 CFR 164.510(a)(3)(A) **(A)** Consistent with a prior expressed preference of the individual, if any, that is known to the covered health care provider; and ###### 45 CFR 164.510(a)(3)(B) **(B)** In the individual's best interest as determined by the covered health care provider, in the exercise of professional judgment. ##### 45 CFR 164.510(a)(3)(ii) **(ii)** The covered health care provider must inform the individual and provide an opportunity to object to uses or disclosures for directory purposes as required by paragraph (a)(2) of this section when it becomes practicable to do so. ### 45 CFR 164.510(b) **(b)** Standard: Uses and disclosures for involvement in the individual's care and notification purposes—(1) Permitted uses and disclosures. (i) A covered entity may, in accordance with paragraphs (b)(2), (b)(3), or (b)(5) of this section, disclose to a family member, other relative, or a close personal friend of the individual, or any other person identified by the individual, the protected health information directly relevant to such person's involvement with the individual's health care or payment related to the individual's health care. ##### 45 CFR 164.510(b)(ii) **(ii)** A covered entity may use or disclose protected health information to notify, or assist in the notification of (including identifying or locating), a family member, a personal representative of the individual, or another person responsible for the care of the individual of the individual's location, general condition, or death. Any such use or disclosure of protected health information for such notification purposes must be in accordance with paragraphs (b)(2), (b)(3), (b)(4), or (b)(5) of this section, as applicable. #### 45 CFR 164.510(b)(2) **(2)** Uses and disclosures with the individual present. If the individual is present for, or otherwise available prior to, a use or disclosure permitted by paragraph (b)(1) of this section and has the capacity to make health care decisions, the covered entity may use or disclose the protected health information if it: ##### 45 CFR 164.510(b)(2)(i) **(i)** Obtains the individual's agreement; ##### 45 CFR 164.510(b)(2)(ii) **(ii)** Provides the individual with the opportunity to object to the disclosure, and the individual does not express an objection; or ##### 45 CFR 164.510(b)(2)(iii) **(iii)** Reasonably infers from the circumstances, based on the exercise of professional judgment, that the individual does not object to the disclosure. #### 45 CFR 164.510(b)(3) **(3)** Limited uses and disclosures when the individual is not present. If the individual is not present, or the opportunity to agree or object to the use or disclosure cannot practicably be provided because of the individual's incapacity or an emergency circumstance, the covered entity may, in the exercise of professional judgment, determine whether the disclosure is in the best interests of the individual and, if so, disclose only the protected health information that is directly relevant to the person's involvement with the individual's care or payment related to the individual's health care or needed for notification purposes. A covered entity may use professional judgment and its experience with common practice to make reasonable inferences of the individual's best interest in allowing a person to act on behalf of the individual to pick up filled prescriptions, medical supplies, X-rays, or other similar forms of protected health information. #### 45 CFR 164.510(b)(4) **(4)** Uses and disclosures for disaster relief purposes. A covered entity may use or disclose protected health information to a public or private entity authorized by law or by its charter to assist in disaster relief efforts, for the purpose of coordinating with such entities the uses or disclosures permitted by paragraph (b)(1)(ii) of this section. The requirements in paragraphs (b)(2), (b)(3), or (b)(5) of this section apply to such uses and disclosures to the extent that the covered entity, in the exercise of professional judgment, determines that the requirements do not interfere with the ability to respond to the emergency circumstances. #### 45 CFR 164.510(b)(5) **(5)** Uses and disclosures when the individual is deceased. If the individual is deceased, a covered entity may disclose to a family member, or other persons identified in paragraph (b)(1) of this section who were involved in the individual's care or payment for health care prior to the individual's death, protected health information of the individual that is relevant to such person's involvement, unless doing so is inconsistent with any prior expressed preference of the individual that is known to the covered entity. ## Source Source: Electronic Code of Federal Regulations (eCFR), title 45, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR. Source credit: \[65 FR 82802, Dec. 28, 2000, as amended at 67 FR 53270, Aug. 14, 2002; 78 FR 5699, Jan. 25, 2013\] [45 CFR 164.510 on eCFR](https://www.ecfr.gov/current/title-45/section-164.510) eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026. This is reference material, not legal advice. ## Navigation [HIPAA Navigator](https://dposchool.com/hipaa) / 45 CFR 164.510 Previous: [45 CFR 164.509 HIPAA: Uses and disclosures for which an attestation is required](https://dposchool.com/hipaa/section/164.509) Next: [45 CFR 164.512 HIPAA: Uses and disclosures for which an authorization or opportunity to agree or object is not required](https://dposchool.com/hipaa/section/164.512) ## For AI agents - Machine-readable index: https://dposchool.com/hipaa/llms.txt - JSON API: https://dposchool.com/hipaa/api/v1/index.json - Vendor privacy and security facts: https://vendor.watch (API for agents) - Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api - Legal services from a California law firm, through its MCP server: https://northend.law/agents