A: “Consent” is a general term under the Privacy Rule, but “authorization” has much more specific requirements. The Privacy Rule permits, but does not require, a CE to obtain patient “consent” for uses and disclosures of PHI for treatment, payment, and healthcare operations.

What is the difference between consent and authorization to use patient specific health information?

Consent refers to an agreement by the patient to allow the health-care provider to use this information to carry out treatment, payment, and health-care operations. Authorization refers to the permission for the health-care provider to make specific disclosures not otherwise authorized by law.

What is the difference between consent and authorization under the Hipaa privacy rule in terms of research studies?

An Authorization differs from an informed consent in that an Authorization is an individual's permission for a covered entity to use or disclose PHI for a certain purpose, such as a research study. An informed consent, on the other hand, is the individual's permission to participate in the research.