2. Access to individually identifiable health information is restricted to a "need to know basis." In other words only what you need to know.
3.You can disclose only the "minimum information necessary." Only disclose information that the patient ask for specifically.
4. Patients have significant new rights of control over their health information. This means that you will have to make the records open to a patient any time they want to see them.
5. You have to provide your patients a written notification of their rights. It must be a clear well written, detailed