Jarlsburg, 2 years ago (edited 1 year ago)

Yeah, I didn’t say any of that but ok. HIPAA/employers actually require you to give law enforcement information in a variety of situations, including specifically the situation I mentioned:

To report PHI that the covered entity in good faith believes to be evidence of a crime that occurred on the covered entity’s premises (45 CFR 164.512(f)(5)).

HHS - When does the Privacy Rule allow covered entities to disclose information to law enforcement