A covered entity may use or disclose PHI without an authorization, or documentation of a waiver or an alteration of authorization, for all of the following EXCEPT:
A covered entity may use or disclose PHI without authorization except for the data that does not cross state lines when disclosed by the covered entity.
Explanation:
The protected health information that the covered entities like health plans and health service providers have access to cannot be disclosed or shared with the covered entities functioning in the other states.
Almost all the states in the United States have laws in place to restrict the action of disclosure of protected health information.
