The HIPAA Privacy Rule exception for law enforcement purposes, 45 CFR § 164.512(f), permits a covered entity (generally, healthcare providers, health plans and their business associates) to disclose PHI to law enforcement officials without patient authorization under certain circumstances.
Those pharmacies also have this exception listed in their Privacy Policy. I don’t like it either, but it is legal.
The HIPAA Privacy Rule exception for law enforcement purposes, 45 CFR § 164.512(f), permits a covered entity (generally, healthcare providers, health plans and their business associates) to disclose PHI to law enforcement officials without patient authorization under certain circumstances.
Those pharmacies also have this exception listed in their Privacy Policy. I don’t like it either, but it is legal.