AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/hipaa-restriction-paid-in-full

A patient pays in full out of pocket and asks that the visit not be shared with their health plan. Must the provider agree?

Yes, it must agree (unless law requires the disclosure).

Start playing free

  1. Yes, it must agree ✔
  2. No, restrictions are always optional
  3. Only if the health plan approves

Why: Covered entities usually don't have to agree to restriction requests. But they must agree not to tell a health plan about an item or service paid in full out of pocket, unless law requires it.

Huh, didn't know that: Even an agreed restriction can be set aside to give the patient emergency treatment.

The dad joke
Why did the dollar go to school? To get more cents.
Like this card?
Play the game

References

Answer: Yes, it must agree. Covered entities usually don't have to agree to restriction requests. But they must agree not to tell a health plan about an item or service paid in full out of pocket, unless law requires it.

  1. 45 CFR 164.522 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.522
    has paid the covered entity in full
    Checked 2026-10-10.
  2. 45 CFR 164.522 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.522
    a covered entity is not required to agree to a restriction.
    Checked 2026-10-10.
  3. 45 CFR 164.522 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.522
    is in need of emergency treatment and the restricted protected health information is needed to provide the emergency treatment
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Healthcare Privacy (HIPAA)Which three kinds of organizations are HIPAA covered entities?Healthcare Privacy (HIPAA)Does HIPAA protect patient information that is spoken out loud, or only paper and computer records?Healthcare Privacy (HIPAA)A hospital's HR office keeps Dana's pre-hire physical in Dana's personnel file, as the employer. Is that file PHI?

That's stuff everyone should know.